← Database

CVE-2022-27041

HIGH CVSS: 7.5 Published: 2022-04-11 Modified: 2026-06-17

Description

Due to lack of protection, parameter student_id in OpenSIS Classic 8.0 /modules/eligibility/Student.php can be used to inject SQL queries to extract information from databases.

Affected Platforms

Os4Ed Opensis

Weakness Type

CWE-89

References