PT-2022-18188

Name of the Vulnerable Software and Affected Versions OpenSIS Classic version 8.0 Description The issue is due to a lack of protection, allowing the student id parameter in the "/modules/eligibility/Student.php" endpoint to be used for injecting SQL queries, which can extract information from...