CVE-2021-41691: SQL Injection
Published Jun 24, 2025
·Updated
A SQL injection vulnerability exists in OS4Ed Open Source Information System Community v8.0 via the "studentid" and "TRANSFER{SCHOOL]" parameters in POST request sent to /TransferredOutModal.php.
Affected Software
2 affected components
OS4ED Open Source Information System Community
OS4ED openSIS=8.0
Event History
Jun 24, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2021-41691?
CVE-2021-41691 is classified as a high severity SQL injection vulnerability.
2
How do I fix CVE-2021-41691?
To fix CVE-2021-41691, ensure input validation is implemented to sanitize the 'student_id' and 'TRANSFER{SCHOOL}' parameters.
3
What software is affected by CVE-2021-41691?
CVE-2021-41691 affects OS4Ed Open Source Information System Community version 8.0.
4
What is the potential impact of CVE-2021-41691?
The potential impact of CVE-2021-41691 includes unauthorized access to the database and manipulation of sensitive data.
5
How does CVE-2021-41691 occur?
CVE-2021-41691 occurs due to insufficient input validation in the handling of SQL queries in the TransferredOutModal.php script.