VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Nov 30, 2021· Updated Jun 17, 2026

CVE-2021-41677

CVE-2021-41677

Description

A SQL injection vulnerability exists in version 8.0 of openSIS when MySQL or MariaDB is used as the application database. An attacker can then issue the SQL command through the /opensis/functions/GetStuListFnc.php &Grade= parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • openSIS/openSIScpe-rescue2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: =8.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.