CVE-2021-40353 openSIS 8.0 SQL Injection Vulnerability
CVE-2021-40353 CVE-2021-40353 openSIS 80 SQL Injection Vulnerability cvemitreorg/cgi-bin/cvenamecgi?name=CVE-2021-40353 A SQL injection vulnerability exists in version 80 of openSIS when MySQL or MariaDB is used as the application database An attacker can then issue the SQL command through the USERNAME parameter Vulnerable PHP Page: indexphp - USERNAME paramete