CVE-2022-27041

OpenSIS/Solution: CVE-2022-27041 is a SQL injection vulnerability in OpenSIS Classic 8.0 where the parameter student_id in /modules/eligibility/Student.php can be abused to inject SQL and exfiltrate data. The connected documents (CNVD, RH Red Hat, OSV, CNVD, NVD, CVELIST, CVE records, and related...

CVE-2022-27041

Due to lack of protection, parameter studentid in OpenSIS Classic 8.0 /modules/eligibility/Student.php can be used to inject SQL queries to extract information from databases...