{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3aos4edopensis8.0community/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:os4ed:opensis:8.0:*:*:*:community:*:*:*","cpe:2.3:a:os4ed:opensis:9.1:*:*:*:community:*:*:*"],"_cs_cves":[{"cvss":8.8,"id":"CVE-2024-35584"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["OpenSIS Community Edition (8.0 - 9.1)"],"_cs_severities":["high"],"_cs_tags":["web-application-vulnerability","sqli","authenticated-access"],"_cs_type":"advisory","_cs_vendors":["os4ed"],"content_html":"\u003cp\u003eOpenSIS Community Edition versions 8.0 through 9.1 contain an authenticated SQL injection vulnerability identified as CVE-2024-35584. The application fails to sanitize the 'X-Forwarded-For' HTTP header before using it in SQL queries within multiple files, including Ajax.php, Modules.php, ForExport.php, ForWindow.php, and functions/HackingLogFnc.php. An authenticated attacker can exploit this to achieve unauthorized database access, modification, or deletion.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows an authenticated user to perform blind SQL injection, potentially leading to unauthorized data access, integrity compromise, or availability disruption. The CVSS 3.1 score for this vulnerability is 8.8 (High).\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAudit web server logs for suspicious 'X-Forwarded-For' header values containing SQL keywords or characters such as single quotes, semicolons, or 'SLEEP' functions.\u003c/li\u003e\n\u003cli\u003eImplement parameterized queries in the identified PHP files (Ajax.php, Modules.php, ForExport.php, ForWindow.php, functions/HackingLogFnc.php) to prevent future injection.\u003c/li\u003e\n\u003cli\u003eApply strict input validation on all HTTP headers used for logging or application logic.\u003c/li\u003e\n\u003cli\u003eEnsure all OpenSIS instances are updated to the latest available version if a patch is released to mitigate the identified vulnerability.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-24T04:05:23Z","date_published":"2026-10-24T04:05:23Z","id":"https://feed.craftedsignal.io/briefs/2026-10-opensis-sql-injection/","summary":"An authenticated SQL injection vulnerability in OpenSIS Community Edition 8.0-9.1 allows attackers to execute arbitrary SQL commands via unsanitized X-Forwarded-For headers.","title":"OpenSIS Community Edition: Authenticated SQL Injection (CVE-2024-35584)","url":"https://feed.craftedsignal.io/briefs/2026-10-opensis-sql-injection/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:os4ed:opensis:8.0:*:*:*:community:*:*:*","version":"https://jsonfeed.org/version/1.1"}