Unscored CVE-2014-8366 EUVD-2014-8203GHSA-4r39-95r5-429h

SQL injection vulnerability in openSIS 4.5 through 5.3 allows remote attackers to execute arbitrary SQL commands via the Username and passw…

Published Oct 20, 2014 · Updated Sep 16, 2024 · Assigned by mitre

Description

SQL injection vulnerability in openSIS 4.5 through 5.3 allows remote attackers to execute arbitrary SQL commands via the Username and password to index.php.

References

20140628 openSIS 4.5 - 5.3 SQL Injection vulnerability mailing-list
http://packetstormsecurity.com/files/127284/openSIS-5.3-SQL-Injection.html
59114 third-party-advisory