CVE-2024-35584

SQL injection vulnerabilities were discovered in Ajax.php, ForWindow.php, ForExport.php, Modules.php, functions/HackingLogFnc.php in OpenSis Community Edition 9.1 to 8.0, and possibly earlier versions. It is possible for an authenticated user to perform SQL Injection due to the lack to...

CVE-2024-35584

creationtimestamp| type| source ---|---|--- 2024-10-15 21:57:41+00:00| seen| https://t.me/cvedetector/7941 2026-09-22 07:00:05+00:00| seen| Telegram/nMUaw2zZXyCly-Bqsn7kRIsLFdlVwXx5RzNb6RunyMxeZuU 2026-09-23 00:00:25+00:00| published-proof-of-concept|...

CVE-2024-35584

SQL injection vulnerabilities were discovered in Ajax.php, ForWindow.php, ForExport.php, Modules.php, functions/HackingLogFnc.php in OpenSis Community Edition 9.1 to 8.0, and possibly earlier versions. It is possible for an authenticated user to perform SQL Injection due to the lack to...

CVE-2024-35584

The OpenSis Community Edition (versions 9.1, 8.0, and possibly earlier) is vulnerable to SQL injection in several files, including Ajax.php, ForWindow.php, ForExport.php, Modules.php, and functions/HackingLogFnc.php. The root cause is a lack of sanitization where the application directly appends ...