Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
OS4ED openSIS 8.0 is affected by cross-site scripting (XSS) in EmailCheckOthers.php. An attacker can inject JavaScript code to get the user's cookie and take over the working session of user.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OS4Ed OpenSIS 跨站脚本漏洞
Vulnerability Description
OS4Ed OpenSIS是OS4Ed的商业级、安全、可扩展和直观的学生信息系统、学校管理软件。具有在一个安装中运行单个或多个机构的所有功能。基于 Web，php 代码，MySQL 数据库。 OS4Ed OpenSIS 存在安全漏洞，该漏洞源于 OS4ED openSIS 8.0 受 EmailCheckOthers.php 中的跨站点脚本 (XSS) 影响。 攻击者可以注入 JavaScript 代码来获取用户的 cookie 并接管用户的工作会话。
CVSS Information
N/A
Vulnerability Type
N/A