OpenSIS SQL Injection (CVE-2021-40618; CVE-2021-40543)

An SQL injection vulnerability exists in OpenSIS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

CVE-2021-40618

An SQL Injection vulnerability exists in openSIS Classic 8.0 via the 1 ADDRCONTUSRN, 2 ADDRCONTPSWD, 3 SECNCONTUSRN or 4 SECNCONTPSWD parameters in HoldAddressFields.php...

CVE-2021-40618

CVE-2021-40618 describes an SQL injection in openSIS Classic 8.0 via the parameters ADDR_CONT_USRN, ADDR_CONT_PSWD, SECN_CONT_USRN, and SECN_CONT_PSWD in HoldAddressFields.php. The vulnerability could allow an attacker to obtain sensitive database information. Affected product is openSIS Classic ...