CVEs-PoC/2021/CVE-2021-40543.md

CVE-2021-40543

Description

Opensis-Classic Version 8.0 is affected by a SQL injection vulnerability due to a lack of sanitization of input data at two parameters $_GET['usrid'] and $_GET['prof_id'] in the PasswordCheck.php file.

POC

Reference

• https://github.com/OS4ED/openSIS-Classic/issues/191

Github

• https://github.com/20142995/nuclei-templates
• https://github.com/cyb3r-w0lf/nuclei-template-collection