CVE-2024-51211 Scanner
CVE-2024-51211 Scanner - SQL Injection vulnerability in openSIS Classic
Used 2.9k times · 5.9k assets checked · domain, subdomain, ipv4
CVE
CVE-2024-51211
9.8
CVSScritical
Exploitable remotely over the internet · no authentication required.
Description
SQL injection vulnerability exists in OS4ED openSIS-Classic Version 9.1, specifically in the resetuserinfo.php file. The vulnerability is due to improper input validation of the $username_stn_id parameter, which can be manipulated by an attacker to inject arbitrary SQL commands.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
opensis-classic
Updated Sep 26, 2026View on NVD →
S4E scanner
CVE history: opensis-classic
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →