{"id":"CVE-2022-27041","details":"Due to lack of protection, parameter student_id in OpenSIS Classic 8.0 /modules/eligibility/Student.php can be used to inject SQL queries to extract information from databases.","modified":"2026-08-27T03:48:43.009535178Z","published":"2022-04-11T13:36:03Z","database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/27xxx/CVE-2022-27041.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/27xxx/CVE-2022-27041.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-27041"},{"type":"REPORT","url":"https://github.com/OS4ED/openSIS-Classic/issues/248"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/OS4ED/openSIS-Classic","events":[{"introduced":"0a2d61fff35900fc91566e6621d49959599bcb4e"},{"last_affected":"0a2d61fff35900fc91566e6621d49959599bcb4e"}],"database_specific":{"source":"CPE_STRING","cpe":"cpe:2.3:a:os4ed:opensis:8.0:*:*:*:*:*:*:*","extracted_events":[{"introduced":"8.0"},{"last_affected":"8.0"}]}}],"versions":["8.0","V8.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-27041.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/os4ed/opensis-classic","events":[{"introduced":"0a2d61fff35900fc91566e6621d49959599bcb4e"},{"last_affected":"0a2d61fff35900fc91566e6621d49959599bcb4e"}],"database_specific":{"source":"CPE_STRING","cpe":"cpe:2.3:a:os4ed:opensis:8.0:*:*:*:*:*:*:*","extracted_events":[{"introduced":"8.0"},{"last_affected":"8.0"}]}}],"versions":["8.0","V8.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-27041.json"}}],"schema_version":"1.9.0"}