CVE-2021-41691 PoC — OS4Ed OpenSIS 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41691.yaml

Associated Vulnerability

Title:OS4Ed OpenSIS 安全漏洞 (CVE-2021-41691)
Description:OS4Ed OpenSIS是美国OS4Ed公司的一款学生信息系统软件。 OS4Ed OpenSIS v8.0版本存在安全漏洞，该漏洞源于对POST请求中student_id和TRANSFER{SCHOOL]参数处理不当，可能导致SQL注入攻击。

Description

openSIS Student Information System version 8.0 is susceptible to SQL injection via the student_id and TRANSFER[SCHOOL] parameters in POST request sent to /TransferredOutModal.php.

File Snapshot


 id: CVE-2021-41691

info:
  name: openSIS Student Information System 8.0 SQL Injection
  author: Bar

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!