Critical severity9.8NVD Advisory· Published Sep 1, 2021· Updated Jun 17, 2026
CVE-2021-39378
CVE-2021-39378
Description
A SQL Injection vulnerability exists in openSIS 8.0 when MySQL (MariaDB) is being used as the application database. A malicious attacker can issue SQL commands to the MySQL (MariaDB) database through the NamesList.php str parameter.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- openSIS/openSISdescription
Patches
Vulnerability mechanics
References
1- opensis.comnvdProduct
News mentions
0No linked articles in our index yet.