8 matches found
EUVD-2021-27718
Malicious code in bioql PyPI...
Opensis SQL Injection Vulnerability (CNVD-2021-101539)
openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in openSIS version 8.0. The vulnerability stems from a lack of validation of input data for the $GET'usrid' and $GET'profid' parameters in PasswordCheck.php. An attacker can...
CVE-2021-40543
Opensis-Classic Version 8.0 is affected by a SQL injection vulnerability due to a lack of sanitization of input data at two parameters $GET'usrid' and $GET'profid' in the PasswordCheck.php file...
Sql injection
Opensis-Classic Version 8.0 is affected by a SQL injection vulnerability due to a lack of sanitization of input data at two parameters $GET'usrid' and $GET'profid' in the PasswordCheck.php file...
CVE-2021-40543
Opensis-Classic Version 8.0 is affected by a SQL injection vulnerability due to a lack of sanitization of input data at two parameters $GET'usrid' and $GET'profid' in the PasswordCheck.php file...
CVE-2021-40543
OpenSIS OpenSIS Classic 8.0 is affected by a SQL injection in PasswordCheck.php due to lack of sanitization of input data for $_GET['usrid'] and $_GET['prof_id']. The vulnerability allows an attacker to inject SQL and, as described in CNVD/CNNVD variants, could enable retrieval of database inform...
PT-2021-22931
Name of the Vulnerable Software and Affected Versions Opensis-Classic version 8.0 Description The issue is caused by a lack of sanitization of input data at two parameters usrid and prof id in the PasswordCheck.php file, leading to a SQL injection vulnerability. Recommendations For Opensis-Classi...
CVE-2021-40543: Improper Neutralization of Special Elements used in an SQL Command
Opensis-Classic Version 8.0 is affected by a SQL injection vulnerability due to a lack of sanitization of input data at two parameters $GET'usrid' and $GET'profid' in the PasswordCheck.php file...