Description
Due to lack of protection, parameter student_id in OpenSIS Classic 8.0 /modules/eligibility/Student.php can be used to inject SQL queries to extract information from databases.
Unscored
CVE-2022-27041
EUVD-2022-31581GHSA-w7f3-837p-8jxx
Due to lack of protection, parameter student_id in OpenSIS Classic 8.0 /modules/eligibility/Student.php can be used to inject SQL queries t…
Published Apr 11, 2022 · Updated Aug 3, 2024 · Assigned by mitre