CVE-2014-8366

High

Published: 20/10/2014(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

SQL injection vulnerability in openSIS from version 4.5 to 5.3 allows remote attackers to execute arbitrary SQL commands via the Username and password to index.php.

Risk Assessment

Attackers can gain access to sensitive data in the database, potentially leading to serious security breaches for the organization.

Recommendation

It is recommended to update openSIS to the latest version and implement safeguards against SQL injection.

Other vulnerabilities in openSIS

CVE-2025-65594High
OpenSIS version 9.2 and below is vulnerable to Incorrect Access Control in Student.php, allowing an authenticated low-privilege user to perform unauthorized database write operations on other users' data.

Original NVD description (English source)

SQL injection vulnerability in openSIS 4.5 through 5.3 allows remote attackers to execute arbitrary SQL commands via the Username and password to index.php.