CVE:CVE-2021-27341
CNNVD:CNNVD-202109-1112
Open Solutions For Education openSIS是美国Open Solutions for Education（Open Solutions For Education）公司的一套开源的学生信息管理系统。
OpenSIS Community Edition 存在路径遍历漏洞，该漏洞源于OpenSIS Community Edition <= 7.6的版本通过"filename"参数受DownloadWindow.php本地文件包含漏洞影响。
solution:Upgrade os4ed opensis to a higher version than 7.6,and avoid the version (,7.6]