openSIS SQL Injection Vulnerability (CNVD-2021-101542)

openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in ForgotPassUserName.php in openSIS Community Edition version 8.0. An attacker can exploit this vulnerability to obtain sensitive database information...

CVE-2021-40617

An SQL Injection vulnerability exists in openSIS Community Edition version 8.0 via ForgotPassUserName.php...

CVE-2021-40617

An SQL Injection vulnerability exists in openSIS Community Edition version 8.0 via ForgotPassUserName.php...

Sql injection

An SQL Injection vulnerability exists in openSIS Community Edition version 8.0 via ForgotPassUserName.php...

CVE-2021-40617

An SQL Injection vulnerability exists in openSIS Community Edition version 8.0 via ForgotPassUserName.php...

PT-2021-22935

Name of the Vulnerable Software and Affected Versions openSIS Community Edition version 8.0 Description An SQL Injection issue exists via the ForgotPassUserName.php file. Recommendations For openSIS Community Edition version 8.0, consider restricting access to the ForgotPassUserName.php file unti...

CVE-2021-40617: Improper Neutralization of Special Elements used in an SQL Command

An SQL Injection vulnerability exists in openSIS Community Edition version 8.0 via ForgotPassUserName.php...