Threats tagged 'ghsa-p62p-8pxp-cm8g'

A SQL injection vulnerability exists in OS4ED openSIS-Classic up to version 9.3 in the save action function of modules/students/Student.php within the General Information Tab component. This vulnerability allows remote attackers with high privileges to manipulate the 'students' argument to execute SQL injection attacks. The vulnerability has a medium severity score of 4.7 and has been publicly disclosed. The project has been informed but has not yet responded or issued a patch.