CVE-2024-35584
HighCVSS 8.8Exploitation Probability (EPSS)
Very high risk92th percentile - higher than 92% of all known CVEs
Summary
SQL injection vulnerabilities were discovered in OpenSis Community Edition versions 8.0 to 9.1 in files Ajax.php, ForWindow.php, ForExport.php, Modules.php, and functions/HackingLogFnc.php. An authenticated user can exploit the lack of sanitization of the X-Forwarded-For header, which is directly appended to an INSERT statement, leading to SQL injection.
Risk Assessment
An attacker can gain unauthorized access to the database, modify, read, or delete data, potentially compromising the confidentiality and integrity of the system.
Recommendation
Immediately update OpenSis Community Edition to the latest available version and implement proper input filtering and sanitization, especially for the X-Forwarded-For header.
Original NVD description (English source)
SQL injection vulnerabilities were discovered in Ajax.php, ForWindow.php, ForExport.php, Modules.php, functions/HackingLogFnc.php in OpenSis Community Edition 9.1 to 8.0, and possibly earlier versions. It is possible for an authenticated user to perform SQL Injection due to the lack to sanitisation. The application takes arbitrary value from "X-Forwarded-For" header and appends it to a SQL INSERT statement directly, leading to SQL Injection.