← Database

CVE-2021-40618

CRITICAL CVSS: 9.8 Published: 2021-10-12 Modified: 2026-06-17

Description

An SQL Injection vulnerability exists in openSIS Classic 8.0 via the 1) ADDR_CONT_USRN, 2) ADDR_CONT_PSWD, 3) SECN_CONT_USRN or 4) SECN_CONT_PSWD parameters in HoldAddressFields.php.

Affected Platforms

Os4Ed Opensis

Weakness Type

CWE-89

References