high7.5
CVE-2021-40635
OS4ED openSIS 8.0 is affected by SQL injection in ChooseCpSearch.php, ChooseRequestSearch.php.
Impact
OS4ED openSIS 8.0 is affected by SQL injection in ChooseCpSearch.php, ChooseRequestSearch.php. An attacker can inject a SQL query to extract information from the database.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Os4ed | Opensis | Version 8.0 |