CVE-2021-41691

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-41691
A SQL injection vulnerability exists in OS4Ed Open Source Information System Community v8.0 via the "student_id" and "TRANSFER{SCHOOL]" parameters in POST request sent to /TransferredOutModal.php.
CVSS

No CVSS.

References
Link Resource
https://github.com/OS4ED/openSIS-Classic/ Product
https://opensis.com/ Product
https://resources.s4e.io/blog/opensis-student-information-system-0-day-vulnerability-cve-2021-41691/ Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:os4ed:opensis:8.0:*:*:*:community:*:*:*
History

09 Jul 2025, 19:07

Type Values Removed Values Added
References () https://opensis.com/ - () https://opensis.com/ - Product
References () https://github.com/OS4ED/openSIS-Classic/ - () https://github.com/OS4ED/openSIS-Classic/ - Product
References () https://resources.s4e.io/blog/opensis-student-information-system-0-day-vulnerability-cve-2021-41691/ - () https://resources.s4e.io/blog/opensis-student-information-system-0-day-vulnerability-cve-2021-41691/ - Third Party Advisory
First Time Os4ed opensis
Os4ed
CPE cpe:2.3:a:os4ed:opensis:8.0:*:*:*:community:*:*:*

24 Jun 2025, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-06-24 16:15

Updated : 2025-07-09 19:07

NVD link : CVE-2021-41691

Mitre link : CVE-2021-41691

JSON object : View

Products Affected

os4ed

  • opensis
CWE

No CWE.