CVE-2024-46626

creationtimestamp| type| source ---|---|--- 2024-10-02 19:42:27+00:00| seen| https://t.me/cvedetector/6843 2025-04-04 21:02:07+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3llzctf7arz23...

CVE-2024-46626

The OS4ED openSIS-Classic v9.1 student information system contains a SQL injection vulnerability. An attacker can exploit this by sending a specially crafted payload via the X-Forwarded-For header parameter in a POST request to /Ajax.php . The vulnerability allows for boolean-based blind and erro...