high7.5
CVE-2022-27041
Due to lack of protection, parameter student_id in OpenSIS Classic 8.0 /modules/eligibility/Student.php can be used to inject SQL queries to extract informatio…
Impact
Due to lack of protection, parameter student_id in OpenSIS Classic 8.0 /modules/eligibility/Student.php can be used to inject SQL queries to extract information from databases.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Os4ed | Opensis | Version 8.0 |