← Database

CVE-2021-41691

CRITICAL CVSS: 9.8 Published: 2025-06-24 Modified: 2026-06-17

Description

A SQL injection vulnerability exists in OS4Ed Open Source Information System Community v8.0 via the "student_id" and "TRANSFER{SCHOOL]" parameters in POST request sent to /TransferredOutModal.php.

Affected Platforms

Os4Ed Opensis

Weakness Type

CWE-89

References