← Database

CVE-2021-41677

CRITICAL CVSS: 9.8 Published: 2021-11-30 Modified: 2026-06-17

Description

A SQL injection vulnerability exists in version 8.0 of openSIS when MySQL or MariaDB is used as the application database. An attacker can then issue the SQL command through the /opensis/functions/GetStuListFnc.php &Grade= parameter.

Affected Platforms

Os4Ed Opensis

Weakness Type

CWE-89

References