Lucene search

K
osvGoogleOSV:CVE-2021-40543
HistoryOct 11, 2021 - 1:15 p.m.

CVE-2021-40543

2021-10-1113:15:07
Google
osv.dev
5
opensis-classic version 8.0
sql injection
passwordcheck.php
input data sanitization

AI Score

7.7

Confidence

Low

EPSS

0.002

Percentile

58.0%

Opensis-Classic Version 8.0 is affected by a SQL injection vulnerability due to a lack of sanitization of input data at two parameters $_GET[‘usrid’] and $_GET[‘prof_id’] in the PasswordCheck.php file.

AI Score

7.7

Confidence

Low

EPSS

0.002

Percentile

58.0%