Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:os4ed:opensis:9.1:*:*:*:community:*:*:*

1 brief RSS
high advisory

OpenSIS Community Edition: Authenticated SQL Injection (CVE-2024-35584)

An authenticated SQL injection vulnerability in OpenSIS Community Edition 8.0-9.1 allows attackers to execute arbitrary SQL commands via unsanitized X-Forwarded-For headers.

OpenSIS Community Edition web-application-vulnerability sqli authenticated-access
1r 1t 1c