CVE-2024-51211

OS4ED openSIS-Classic Version 9.1 (and potentially 9.0) is vulnerable to an unauthenticated SQL injection in the resetuserinfo.php file. The flaw stems from improper input validation of the $username_stn_id parameter, allowing remote attackers to inject arbitrary SQL commands and gain unauthorize...