openSIS Community Edition 8.0 - SQL Injection

Exploit Title: openSIS Community Edition 8.0 - SQL Injection Date: 2025-11-25 Exploit Author: CodeSecLab Vendor Homepage: https://github.com/OS4ED/openSIS-Classic Software Link: https://github.com/OS4ED/openSIS-Classic Version: 8.0 Tested on: Windows CVE : CVE-2021-40617 Proof Of Concept GET...

📄 openSIS Community Edition 8.0 SQL Injection

openSIS Community Edition version 8.0 suffers from a remote SQL injection vulnerability. Exploit Title: openSIS Community Edition 8.0 - SQL Injection Date: 2025-11-25 Exploit Author: CodeSecLab Vendor Homepage: https://github.com/OS4ED/openSIS-Classic Software Link:...

CVE-2021-40617

openSIS Community Edition 8.0 contains an SQL Injection in ForgotPassUserName.php (vulnerable component). The issue, as described across multiple sources, allows attackers to exploit a query flaw to access sensitive database information. Public PoCs/exploits demonstrate usage patterns like crafti...