CVE-2024-35584

SQL injection vulnerabilities were discovered in Ajax.php, ForWindow.php, ForExport.php, Modules.php, functions/HackingLogFnc.php in OpenSis Community Edition 9.1 to 8.0, and possibly earlier versions. It is possible for an authenticated user to perform SQL Injection due to the lack to...

CVE-2024-35584

creationtimestamp| type| source ---|---|--- 2024-10-15 21:57:41+00:00| seen| https://t.me/cvedetector/7941 2026-09-22 07:00:05+00:00| seen| Telegram/nMUaw2zZXyCly-Bqsn7kRIsLFdlVwXx5RzNb6RunyMxeZuU 2026-09-23 00:00:25+00:00| published-proof-of-concept|...

CVE-2024-35584

SQL injection vulnerabilities were discovered in Ajax.php, ForWindow.php, ForExport.php, Modules.php, functions/HackingLogFnc.php in OpenSis Community Edition 9.1 to 8.0, and possibly earlier versions. It is possible for an authenticated user to perform SQL Injection due to the lack to...

CVE-2024-35584

A SQL injection vulnerability exists in OpenSIS Community Edition versions 9.1 through 8.0 (and possibly earlier) due to a lack of input sanitization. The application takes arbitrary values from the X-Forwarded-For header and directly appends them into SQL INSERT statements. Specifically, the vul...