CVE:CVE-2021-44599
CNNVD:CNNVD-202112-2227
Online Enrollment Management System是开源的一个在线报名管理系统。
Online Enrollment Management System 1.0 版本存在SQL注入漏洞，该漏洞源于系统对于id参数缺少有效的过滤和转义，容易受到SQL注入攻击。攻击者可利用该漏洞可以检索该系统所有用户的敏感信息。
solution:Upgrade online_enrollment_management_system_project online_enrollment_management_system to a higher version than 1.0,and avoid the version 1.0