Vulnerability Spotlight: Multiple SQL, code injection vulnerabilities in OpenSIS
Cisco Talos researchers Yuri Kramarz and Yves Younan discovered multiple SQL injection and remote code execution vulnerabilities in the OpenSIS student information system used by K-12 schools, spanning advisories TALOS-2020-1072 through TALOS-2020-1083 and...