Product

OpenSIS Community Edition (8.0 - 9.1)

1 brief RSS

OpenSIS Community Edition: Authenticated SQL Injection (CVE-2024-35584)

An authenticated SQL injection vulnerability in OpenSIS Community Edition 8.0-9.1 allows attackers to execute arbitrary SQL commands via unsanitized X-Forwarded-For headers.

OpenSIS Community Edition web-application-vulnerability sqli authenticated-access

1r 1t 1c 1h ago