SQL injection vulnerability exists in OS4ED openSIS-Classic Version 9.1, specifically in the resetuserinfo.php file. The vulnerability is due to improper input validation of the $username_stn_id parameter, which can be manipulated by an attacker to inject arbitrary SQL commands.
References
| Link | Resource |
|---|---|
| https://github.com/kutsa1/My-CVE/tree/main/CVE-2024-51211 | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
17 Jul 2025, 17:32
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:os4ed:opensis:9.0:*:*:*:*:*:*:* cpe:2.3:a:os4ed:opensis:9.1:*:*:*:*:*:*:* |
|
| First Time |
Os4ed opensis
Os4ed |
|
| References | () https://github.com/kutsa1/My-CVE/tree/main/CVE-2024-51211 - Exploit, Third Party Advisory |
21 Nov 2024, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-89 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
12 Nov 2024, 13:56
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
08 Nov 2024, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-11-08 19:15
Updated : 2025-07-17 17:32
NVD link : CVE-2024-51211
Mitre link : CVE-2024-51211
CVE.ORG link : CVE-2024-51211
JSON object : View
Products Affected
os4ed
- opensis
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')