CVE-2021-41678

A SQL injection vulnerability exists in version 8.0 of openSIS when MySQL or MariaDB is used as the application database. An attacker can then issue the SQL command through the /opensis/modules/users/Staff.php, staffTITLE parameter...

CVE-2021-41678

openSIS is affected by a SQL injection in version 8.0 when using MySQL/MariaDB. The vulnerability is exploitable via the staff{TITLE] parameter in /opensis/modules/users/Staff.php, due to an unparameterized query, per CVE-2021-41678. CVSS v3.1 base score is 9.8 (CRITICAL), with attack vector NETW...

CVE-2021-41678

A SQL injection vulnerability exists in version 8.0 of openSIS when MySQL or MariaDB is used as the application database. An attacker can then issue the SQL command through the /opensis/modules/users/Staff.php, staffTITLE parameter...