Vulnerability Description
OS4Ed OpenSIS Community 8.0 is vulnerable to a local file inclusion vulnerability in Modules.php (modname parameter), which can disclose arbitrary file from the server's filesystem as long as the application has access to the file.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Os4Ed | Opensis | 8.0 |
Related Weaknesses (CWE)
References
- https://github.com/MiSERYYYYY/Vulnerability-Reports-and-Disclosures/blob/main/OpExploitThird Party Advisory
- https://www.exploit-db.com/exploits/50259ExploitThird Party AdvisoryVDB Entry
- https://youtu.be/wFwlbXANRCoExploitThird Party Advisory
- https://github.com/MiSERYYYYY/Vulnerability-Reports-and-Disclosures/blob/main/OpExploitThird Party Advisory
- https://www.exploit-db.com/exploits/50259ExploitThird Party AdvisoryVDB Entry
- https://youtu.be/wFwlbXANRCoExploitThird Party Advisory
FAQ
What is CVE-2021-40651?
CVE-2021-40651 is a vulnerability with a CVSS score of 6.5 (MEDIUM). OS4Ed OpenSIS Community 8.0 is vulnerable to a local file inclusion vulnerability in Modules.php (modname parameter), which can disclose arbitrary file from the server's filesystem as long as the appl...
How severe is CVE-2021-40651?
CVE-2021-40651 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-40651?
Check the references section above for vendor advisories and patch information. Affected products include: Os4Ed Opensis.