Description
openSIS 8.0 中存在SQL注入漏洞。该漏洞是由于NamesList.php中对参数中的恶意数据校验不足导致的。
OpenSIS 8.0 CVE-2021-39378 SQL 注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2021-39378
https://www.cvedetails.com/cve/CVE-2021-39378/
https://cve.akaoma.com/cve-2021-39378
https://docs.devguard.org/vulnerability-database/CVE-2021-39378/
https://www.incibe.es/index.php/en/incibe-cert/early-warning/vulnerabilities/cve-2021-39378
https://devhub.checkmarx.com/cve-details/cve-2021-39378/
https://avd.aliyun.com/detail?id=AVD-2021-39378
https://github.com/security-n/CVE-2021-39378
https://pentest-tools.com/vulnerabilities-exploits/opensis-student-information-system-80-sql-injection_2998
https://advisories.checkpoint.com/defense/advisories/public/2023/cpai-2021-1538.html