Skip to content
OpenAdvisories
Unscored CVE-2021-40618 EUVD-2021-27792GHSA-mxrq-79wh-g554

An SQL Injection vulnerability exists in openSIS Classic 8.0 via the 1) ADDR_CONT_USRN, 2) ADDR_CONT_PSWD, 3) SECN_CONT_USRN or 4) SECN_CON…

Published Oct 12, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

An SQL Injection vulnerability exists in openSIS Classic 8.0 via the 1) ADDR_CONT_USRN, 2) ADDR_CONT_PSWD, 3) SECN_CONT_USRN or 4) SECN_CONT_PSWD parameters in HoldAddressFields.php.

References