746 matches found
CVE-2021-41677
A SQL injection vulnerability exists in version 8.0 of openSIS when MySQL or MariaDB is used as the application database. An attacker can then issue the SQL command through the /opensis/functions/GetStuListFnc.php &Grade= parameter...
Open Solutions For Education openSIS SQL注入漏洞
Open Solutions For Education openSIS is an open source student information management system from Open Solutions for Education USA. Open Solutions for Education openSIS suffers from a SQL injection vulnerability that originates in openSIS version 8.0 when using MySQL or MariaDB as the application...
Open Solutions For Education openSIS SQL注入漏洞
openSIS is an open source student information management system from Open Solutions for Education. openSIS is vulnerable to SQL injection, which originates in /opensis/functions/GetStuListFnc.php, where the Grade lacks validation of externally entered SQL statements. validation. An attacker could...
OpenSIS SQL Injection (CVE-2021-40618; CVE-2021-40543)
An SQL injection vulnerability exists in OpenSIS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...
The vulnerability of the information system openSIS, related to the failure to protect the SQL query structure, allows a perpetrator to execute arbitrary SQL queries.
The vulnerability of the information system openSIS is related to the failure to implement measures to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries using the ResetUserInfo.php passwordstnid parameter...
The vulnerability of the information system openSIS, related to the failure to protect the SQL query structure, allows a perpetrator to execute arbitrary SQL queries.
The vulnerability of the information system openSIS is related to the failure to implement measures to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries using the username parameter...
The vulnerability of the information system openSIS, related to the failure to protect the SQL query structure, allows a perpetrator to execute arbitrary SQL queries.
The vulnerability of the information system openSIS is related to the failure to implement measures to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries using the index.php USERNAME parameter...
The vulnerability of the information system openSIS, related to the failure to protect the SQL query structure, allows a perpetrator to execute arbitrary SQL queries.
The vulnerability of the information system openSIS is related to the failure to implement measures to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries using the NamesList.php parameter...
openSIS SQL Injection Vulnerability (CNVD-2021-101536)
openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in the ADDRCONTUSRN, ADDRCONTPSWD, SECNCONTUSRN, SECNCONTPSWD parameters in HoldAddressFields.php in openSIS version 8.0. An attacker can exploit this vulnerability to obtain...
CVE-2021-40618
An SQL Injection vulnerability exists in openSIS Classic 8.0 via the 1 ADDRCONTUSRN, 2 ADDRCONTPSWD, 3 SECNCONTUSRN or 4 SECNCONTPSWD parameters in HoldAddressFields.php...
CVE-2021-40618
An SQL Injection vulnerability exists in openSIS Classic 8.0 via the 1 ADDRCONTUSRN, 2 ADDRCONTPSWD, 3 SECNCONTUSRN or 4 SECNCONTPSWD parameters in HoldAddressFields.php...
Sql injection
An SQL Injection vulnerability exists in openSIS Classic 8.0 via the 1 ADDRCONTUSRN, 2 ADDRCONTPSWD, 3 SECNCONTUSRN or 4 SECNCONTPSWD parameters in HoldAddressFields.php...
CVE-2021-40618
An SQL Injection vulnerability exists in openSIS Classic 8.0 via the 1 ADDRCONTUSRN, 2 ADDRCONTPSWD, 3 SECNCONTUSRN or 4 SECNCONTPSWD parameters in HoldAddressFields.php...
CVE-2021-40618
An SQL Injection vulnerability exists in openSIS Classic 8.0 via the 1 ADDRCONTUSRN, 2 ADDRCONTPSWD, 3 SECNCONTUSRN or 4 SECNCONTPSWD parameters in HoldAddressFields.php...
CVE-2021-40618
CVE-2021-40618 describes an SQL injection in openSIS Classic 8.0 via the parameters ADDR_CONT_USRN, ADDR_CONT_PSWD, SECN_CONT_USRN, and SECN_CONT_PSWD in HoldAddressFields.php. The vulnerability could allow an attacker to obtain sensitive database information. Affected product is openSIS Classic ...
Opensis SQL Injection Vulnerability (CNVD-2021-101539)
openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in openSIS version 8.0. The vulnerability stems from a lack of validation of input data for the $GET'usrid' and $GET'profid' parameters in PasswordCheck.php. An attacker can...
Open Solutions For Education openSIS SQL注入漏洞
openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in the ADDRCONTUSRN, ADDRCONTPSWD, SECNCONTUSRN, SECNCONTPSWD parameters in HoldAddressFields.php in openSIS version 8.0. An attacker can exploit this vulnerability to obtain...
openSIS SQL Injection Vulnerability (CNVD-2021-101542)
openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in ForgotPassUserName.php in openSIS Community Edition version 8.0. An attacker can exploit this vulnerability to obtain sensitive database information...
Opensis Cross-Site Scripting Vulnerability (CNVD-2021-101538)
openSIS is a free and open source student information system/school management software. openSIS version 8.0 contains a cross-site scripting vulnerability. An attacker can exploit the vulnerability to inject and execute JavaScript code via the linkurl parameter in Ajaxurlencode.php...