CVE-2014-8366: SQL Injection
Published Oct 20, 2014
·Updated
SQL injection vulnerability in openSIS 4.5 through 5.3 allows remote attackers to execute arbitrary SQL commands via the Username and password to index.php.
Affected Software
2 affected components
OS4ED openSIS=4.5
OS4ED openSIS=5.3
Event History
Oct 20, 2014
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-8366?
CVE-2014-8366 is classified as a high severity SQL injection vulnerability.
2
How do I fix CVE-2014-8366?
To fix CVE-2014-8366, upgrade openSIS to version 5.4 or later, where this issue has been resolved.
3
What systems are affected by CVE-2014-8366?
CVE-2014-8366 affects openSIS versions 4.5 through 5.3.
4
Can CVE-2014-8366 allow remote attacks?
Yes, CVE-2014-8366 allows remote attackers to execute arbitrary SQL commands.
5
What input does CVE-2014-8366 exploit?
CVE-2014-8366 exploits the Username and password fields in index.php.