Description
A SQL injection vulnerability exists in OS4Ed Open Source Information System Community v8.0 via the "student_id" and "TRANSFER{SCHOOL]" parameters in POST request sent to /TransferredOutModal.php.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- openSIS Student Information System 8.0 SQL Injection http/cves/2021/CVE-2021-41691.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.