PT-2021-22856 · Opensips · Opensis

Published 2021-09-24 · Updated 2021-10-01 · CVE-2021-40309

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenSIS version 8.0

Description A SQL injection issue exists in the Take Attendance functionality, allowing an attacker to inject their own SQL query. The cp id miss attn parameter from TakeAttendance.php is vulnerable to SQL injection. An attacker can trigger this issue by making an authenticated HTTP request as a user with access to the Take Attendance functionality.

Recommendations For OpenSIS version 8.0, consider restricting access to the Take Attendance functionality until a patch is available. As a temporary workaround, avoid using the cp id miss attn parameter in the affected TakeAttendance.php file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2021-40309

Affected Products

Opensis

References · 6

• 🔥 https://github.com/MiSERYYYYY/Vulnerability-Reports-and-Disclosures/blob/main/OpenSIS-Community-8.0.md · Exploit
• 🔥 https://exploit-db.com/exploits/50249 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-40309 · Security Note
• https://osv.dev/vulnerability/CVE-2021-40309 · Vendor Advisory
• https://github.com/OS4ED/openSIS-Classic · Note
• https://t.me/cibsecurity/29394 · Telegram Post