CVE-2021-40651

OS4Ed OpenSIS Community 8.0 is vulnerable to a local file inclusion vulnerability in Modules.php (modname parameter), which can disclose arbitrary file from the server's filesystem as long as the application has access to the file.

• CWE-22

• https://github.com/MiSERYYYYY/Vulnerability-Reports-and-Disclosures/blob/main/OpenSIS-Community-8.0.mdExploit, Third Party Advisory
• https://www.exploit-db.com/exploits/50259Exploit, Third Party Advisory, VDB Entry
• https://youtu.be/wFwlbXANRCoExploit, Third Party Advisory
• https://github.com/MiSERYYYYY/Vulnerability-Reports-and-Disclosures/blob/main/OpenSIS-Community-8.0.mdExploit, Third Party Advisory
• https://www.exploit-db.com/exploits/50259Exploit, Third Party Advisory, VDB Entry
• https://youtu.be/wFwlbXANRCoExploit, Third Party Advisory

Published

Sep 29, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-40645An SQL Injection vulnerability exists in glorylion JFinalOA …6.5
• CVE-2021-40647In man2html 1.6g, a specific string being read in from a fil…5.5
• CVE-2021-40648In man2html 1.6g, a filename can be created to overwrite the…5.5
• CVE-2021-40649In Connx Version 6.2.0.1269 (20210623), a cookie can be issu…6.5
• CVE-2021-4065Use after free in autofill in Google Chrome prior to 96.0.46…8.8
• CVE-2021-40650In Connx Version 6.2.0.1269 (20210623), a cookie can be issu…6.5
• CVE-2021-40654An information disclosure issue exist in D-LINK-DIR-615 B2 2…6.5
• CVE-2021-40655An informtion disclosure issue exists in D-LINK-DIR-605 B2 F…7.5
• CVE-2021-40656libsixel before 1.10 is vulnerable to Buffer Overflow in lib…8.8
• CVE-2021-40658Textpattern 4.8.7 is affected by a HTML injection vulnerabil…4.8
• CVE-2021-4066Integer underflow in ANGLE in Google Chrome prior to 96.0.46…8.8
• CVE-2021-40660An issue was discovered in Delight Nashorn Sandbox 0.2.0. Th…7.5