CVE-2021-40543: OS4ED Opensis

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

Opensis-Classic Version 8.0 is affected by a SQL injection vulnerability due to a lack of sanitization of input data at two parameters $_GET['usrid'] and $_GET['prof_id'] in the PasswordCheck.php file.

Affected products

• OS4ED Opensis: version 8.0 only

Published 2021-10-11. Last modified 2026-06-17.