medium6.5Public exploit code
CVE-2021-40651
OS4Ed OpenSIS Community 8.0 is vulnerable to a local file inclusion vulnerability in Modules.php (modname parameter), which can disclose arbitrary file from th…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- OpenSIS 8.0 'modname' - Directory Traversal2021-09-03 · webapps · php
Impact
OS4Ed OpenSIS Community 8.0 is vulnerable to a local file inclusion vulnerability in Modules.php (modname parameter), which can disclose arbitrary file from the server's filesystem as long as the application has access to the file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Os4ed | Opensis | Version 8.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/MiSERYYYYY/Vulnerability-Reports-and-Disclosures/blob/main/OpenSIS-Community-8.0.md
- https://www.exploit-db.com/exploits/50259
- https://youtu.be/wFwlbXANRCo
- https://github.com/MiSERYYYYY/Vulnerability-Reports-and-Disclosures/blob/main/OpenSIS-Community-8.0.md
- https://www.exploit-db.com/exploits/50259
- https://youtu.be/wFwlbXANRCo