CVE-2021-39377

openSIS 8.0 is vulnerable to SQL injection when running with MySQL/MariaDB, via the index.php username parameter. The vulnerability affects openSIS 8.0 and is caused by unsafely constructed SQL when processing the username field, enabling an attacker to issue SQL commands to the database. Connect...