CVE-2020-6136

An exploitable SQL injection vulnerability exists in the DownloadWindow.php functionality of OS4Ed openSIS 7.3. A specially crafted HTTP request can lead to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.

• CWE-89
• CWE-89

• https://talosintelligence.com/vulnerability_reports/TALOS-2020-1079Exploit, Technical Description, Third Party Advisory
• https://talosintelligence.com/vulnerability_reports/TALOS-2020-1079Exploit, Technical Description, Third Party Advisory

Published

Sep 1, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-6130SQL injection vulnerabilities exist in the course_period_id …8.8
• CVE-2020-6131SQL injection vulnerabilities exist in the course_period_id …8.8
• CVE-2020-6132SQL injection vulnerability exists in the ID parameters of O…8.8
• CVE-2020-6133SQL injection vulnerabilities exist in the ID parameters of …8.8
• CVE-2020-6134SQL injection vulnerabilities exist in the ID parameters of …8.8
• CVE-2020-6135An exploitable SQL injection vulnerability exists in the Val…8.8
• CVE-2020-6137SQL injection vulnerability exists in the password reset fun…9.8
• CVE-2020-6138SQL injection vulnerability exists in the password reset fun…9.8
• CVE-2020-6139SQL injection vulnerability exists in the password reset fun…9.8
• CVE-2020-6140SQL injection vulnerability exists in the password reset fun…9.8
• CVE-2020-6141An exploitable SQL injection vulnerability exists in the log…9.8
• CVE-2020-6142A remote code execution vulnerability exists in the Modules.…9.8