Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
OpenSIS Community Edition through 7.6 is affected by incorrect access controls for the file ResetUserInfo.php that allow an unauthenticated attacker to change the password of arbitrary users.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OpenSIS Community Edition 访问控制错误漏洞
Vulnerability Description
Open Solutions For Education openSIS是美国Open Solutions for Education（Open Solutions For Education）公司的一套开源的学生信息管理系统。 OpenSIS Community Edition 7.6版本及之前版本存在访问控制错误漏洞，该漏洞源于会受到文件ResetUserInfo.php的不正确访问控制的影响，这些访问控制允许未经身份验证的攻击者可利用该漏洞更改任意用户的密码。
CVSS Information
N/A
Vulnerability Type
N/A