A SQL Injection vulnerability exists in openSIS 8.0 when MySQL (MariaDB) is being used as the application database. A malicious attacker can issue SQL commands to the MySQL (MariaDB) database through the ResetUserInfo.php password_stn_id parameter.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
os4ed opensis 8.0 |