Vendor
An authenticated SQL injection vulnerability in OpenSIS Community Edition 8.0-9.1 allows attackers to execute arbitrary SQL commands via unsanitized X-Forwarded-For headers.