cbcvebase.
CVE-2014-8366
published 2014-10-20

CVE-2014-8366: SQL injection vulnerability in openSIS 4.5 through 5.3 allows remote attackers to execute arbitrary SQL commands via the Username and password to index.php.

PriorityP344high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
2.07%
79.1th percentile
SQL injection vulnerability in openSIS 4.5 through 5.3 allows remote attackers to execute arbitrary SQL commands via the Username and password to index.php.

Affected

2 ranges
VendorProductVersion rangeFixed in
os4edopensis——
os4edopensis——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.