| Package | Affected versions | Patched versions |
|---|---|---|
| opensis | = 8.0 |
Due to lack of protection, parameter student_id in OpenSIS Classic 8.0 /modules/eligibility/Student.php can be used to inject SQL queries to extract information from databases.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free