Obi08/Enrollment System Vulnerabilities and Affected Products
Vulnerabilities associated with Obi08/Enrollment System.
Products
Clear product- Obi08/Enrollment System1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2024-58276HIGH | Obi08-Enrollment System 1.0 login.php SQL InjectionObi08/Enrollment System 1.0 contains a SQL injection vulnerability in the keyword parameter of /get_subject.php that allows unauthenticated attackers to execute arbitrary SQL queries. Attackers can use UNION-based injection to extract sensitive information from the users table including usernames and passwords. CWE-89Dec 4, 2025 | CVSS8.7v4.0 | EPSS0.398% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |