Security Advisory
CVE-2021-41691
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
A SQL injection vulnerability exists in OS4Ed Open Source Information System Community v8.0 via the "student_id" and "TRANSFER{SCHOOL]" parameters in POST request sent to /TransferredOutModal.php.