SQL injection vulnerability exists in OS4ED openSIS-Classic Version 9.1, specifically in the resetuserinfo.php file. The vulnerability is due to improper input validation of the $username_stn_id parameter, which can be manipulated by an attacker to inject arbitrary SQL commands.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://github.com/kutsa1/My-CVE/tree/main/CVE-2024-51211 | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
17 Jul 2025, 17:32
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/kutsa1/My-CVE/tree/main/CVE-2024-51211 - Exploit, Third Party Advisory | |
| CPE | cpe:2.3:a:os4ed:opensis:9.0:*:*:*:*:*:*:* cpe:2.3:a:os4ed:opensis:9.1:*:*:*:*:*:*:* |
|
| First Time |
Os4ed opensis
Os4ed |
08 Nov 2024, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-11-08 19:15
Updated : 2025-07-17 17:32
NVD link : CVE-2024-51211
Mitre link : CVE-2024-51211
JSON object : View
Products Affected
os4ed
- opensis
CWE
No CWE.