CVE-2021-40617

Description

An SQL Injection vulnerability exists in openSIS Community Edition version 8.0 via ForgotPassUserName.php.

Affected Platforms

Weakness Type

CWE-89

References

• https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2021-40617.md
• https://github.com/OS4ED/openSIS-Classic/issues/192
• https://github.com/OS4ED/openSIS-Classic/issues/192