CVE-2021-41679

A SQL injection vulnerability exists in version 8.0 of openSIS when MySQL or MariaDB is used as the application database. An attacker can then issue t...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

A SQL injection vulnerability exists in version 8.0 of openSIS when MySQL or MariaDB is used as the application database. An attacker can then issue the SQL command through the /opensis/modules/grades/InputFinalGrades.php, period parameter.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

report github.com