CVE-2021-41677

CVE-2021-41677 is a SQL injection vulnerability in openSIS v8.0 when using MySQL/MariaDB as the application database. The issue arises in GetStuListFnc.php via the Grade parameter, where input validation is insufficient, allowing an attacker to inject SQL commands. Public references corroborate o...