Tongda OA Automation Tool delete.php RCE

The vulnerability of the delete.php script located at general/hr/manage/stafftitleevaluation/delete.php within the Tongda OA automation tool relates to the failure to protect the SQL query structure during the processing of the EVALUATIONID parameter. Exploiting this vulnerability allows an...

Tongda OA SQL Injection Vulnerability

Tongda2000 is a web-based intelligent office system from China Tongda Tongda. Tongda OA 2017 suffers from a SQL injection vulnerability that originates from the parameter EVALUATIONID in the file general/hr/manage/stafftitleevaluation/delete.php that can lead to SQL injection...

openSIS SQL Injection

The vulnerability of the information system openSIS is related to the failure to implement measures to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries through the parameter /opensis/modules/users/Staff.php, Staff TITLE...

CVE-2021-41678

A SQL injection vulnerability exists in version 8.0 of openSIS when MySQL or MariaDB is used as the application database. An attacker can then issue the SQL command through the /opensis/modules/users/Staff.php, staffTITLE parameter...

PT-2021-6949

Name of the Vulnerable Software and Affected Versions openSIS version 8.0 Description The issue is related to a lack of protection against SQL query structure exploitation. This can allow a remote attacker to execute arbitrary SQL commands through the "/opensis/modules/users/Staff.php" endpoint,...

CVE-2021-41678: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability exists in version 8.0 of openSIS when MySQL or MariaDB is used as the application database. An attacker can then issue the SQL command through the /opensis/modules/users/Staff.php, staffTITLE parameter...

Open Solutions For Education’s openSIS SQL injection vulnerability

Open Solutions For Education openSIS is an open source student information management system from Open Solutions for Education USA. Open Solutions for Education openSIS suffers from a SQL injection vulnerability that originates in openSIS version 8.0 when using MySQL or MariaDB as the application...