openSIS version 9.1 suffers from a remote SQL injection vulnerability.