CVE-2021-41679: SQL Injection
Published Nov 30, 2021
·Updated
A SQL injection vulnerability exists in version 8.0 of openSIS when MySQL or MariaDB is used as the application database. An attacker can then issue the SQL command through the /opensis/modules/grades/InputFinalGrades.php, period parameter.
Affected Software
1 affected component
OS4ED openSIS=8.0
Event History
Nov 30, 2021
CVE Published
via MITRE·01:17 PM
Data Sourced
via MITRE·01:17 PM
Description
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2021-41679?
CVE-2021-41679 is a SQL injection vulnerability in openSIS version 8.0 when MySQL or MariaDB is used as the application database.
2
What is the severity of CVE-2021-41679?
The severity of CVE-2021-41679 is critical with a score of 9.8.
3
How does CVE-2021-41679 work?
CVE-2021-41679 allows an attacker to issue a SQL command through the /opensis/modules/grades/InputFinalGrades.php, period parameter.
4
Which software versions are affected by CVE-2021-41679?
Version 8.0 of openSIS is affected by CVE-2021-41679.
5
How can I fix CVE-2021-41679?
To fix CVE-2021-41679, it is recommended to upgrade to a patched version of openSIS.