Os4ed vulnerabilities

Products

• Opensis 81
• Opensis-classic 9

Newest

• os4ed opensis-classic openSIS Classic 9.3 - Insecure Direct Object Reference (IDOR) CVE-2026-91107 9.3 CriticalOctober 5, 2026
• os4ed opensis-classic OS4ED openSIS-Classic Save Data DatabaseInc.php db_properties sql injection CVE-2026-103117 5.1 MediumSeptember 30, 2026
• os4ed opensis-classic OS4ED openSIS-Classic Student List Search Endpoint GetStuListFnc.php DBQuery sql injection CVE-2026-103116 5.3 MediumSeptember 30, 2026
• os4ed opensis-classic OS4ED openSIS-Classic Student Search CustomFieldsFnc.php sql injection CVE-2026-103115 5.3 MediumSeptember 30, 2026
• os4ed opensis-classic OS4ED openSIS-Classic Assignment Management Endpoint Assignments.php DBQuery_assignment sql injection CVE-2026-103114 5.3 MediumSeptember 30, 2026
• os4ed opensis-classic OS4ED openSIS-Classic General Information Tab Student.php save action sql injection CVE-2026-103113 5.1 MediumSeptember 30, 2026
• os4ed opensis, opensis-classic +1 more openSIS Classic 9.3 - Authenticated path traversal in SentMail attachment download CVE-2026-11944 5.3 MediumJuly 14, 2026
• os4ed opensis-classic openSIS Classic 9.3 - Insecure Direct Object Reference in Sent Mail CVE-2026-8406 7.1 HighJune 11, 2026
• os4ed opensis OpenSIS 9.2 and below is vulnerable to Incorrect Access Control in Student.php, which allows an... CVE-2025-65594 8.1 HighDecember 9, 2025
• os4ed opensis SQL Injection vulnerability in openSIS v.9.1 allows a remote attacker to execute arbitrary code... CVE-2025-26186 8.1 HighJuly 15, 2025
• os4ed opensis A SQL injection vulnerability exists in OS4Ed Open Source Information System Community v8.0 via... CVE-2021-41691 9.8 CriticalJune 24, 2025
• os4ed opensis An insecure direct object reference (IDOR) in the component /assets/stafffiles of OS4ED openSIS... CVE-2025-22931 7.5 HighApril 3, 2025
• os4ed opensis OS4ED openSIS v7.0 to v9.1 was discovered to contain a SQL injection vulnerability via the... CVE-2025-22930 9.8 CriticalApril 3, 2025
• os4ed opensis OS4ED openSIS v7.0 to v9.1 was discovered to contain a SQL injection vulnerability via the... CVE-2025-22929 9.8 CriticalApril 3, 2025
• os4ed opensis OS4ED openSIS v7.0 to v9.1 was discovered to contain a SQL injection vulnerability via the cp_id... CVE-2025-22928 9.8 CriticalApril 3, 2025
• os4ed opensis An issue in OS4ED openSIS v8.0 through v9.1 allows attackers to execute a directory traversal by... CVE-2025-22927 9.1 CriticalApril 3, 2025
• os4ed opensis An issue in OS4ED openSIS v8.0 through v9.1 allows attackers to execute a directory traversal by... CVE-2025-22926 9.8 CriticalApril 3, 2025
• os4ed opensis OS4ED openSIS v7.0 to v9.1 was discovered to contain a SQL injection vulnerability via the table... CVE-2025-22925 7.5 HighApril 2, 2025
• os4ed opensis OS4ED openSIS v7.0 through v9.1 contains a SQL injection vulnerability via the stu_id parameter... CVE-2025-22924 8.8 HighApril 2, 2025
• os4ed opensis An issue in OS4ED openSIS v8.0 through v9.1 allows attackers to execute a directory traversal and... CVE-2025-22923 8.8 HighApril 2, 2025
• os4ed opensis, opensis-classic +1 more SQL injection vulnerability exists in OS4ED openSIS-Classic Version 9.1, specifically in the... CVE-2024-51211 9.8 CriticalNovember 8, 2024
• opensis SQL injection vulnerability in Ajax.php, ForWindow.php, ForExport.php, Modules.php, functions... CVE-2024-35584 Public exploit 8.8 HighOctober 15, 2024
• os4ed opensis OS4ED openSIS-Classic v9.1 was discovered to contain a SQL injection vulnerability via a crafted... CVE-2024-46626 Public exploit 8.8 HighOctober 2, 2024
• os4ed opensis OpenSIS Classic Community Edition version 9.0 lacks cross-site request forgery (CSRF) protection... CVE-2023-38885 8.8 HighNovember 20, 2023
• os4ed opensis An Insecure Direct Object Reference (IDOR) vulnerability in the Community Edition version 9.0 of... CVE-2023-38884 7.5 HighNovember 20, 2023
• os4ed opensis A reflected cross-site scripting (XSS) vulnerability in the Community Edition version 9.0 of... CVE-2023-38883 6.1 MediumNovember 20, 2023
• os4ed opensis A reflected cross-site scripting (XSS) vulnerability in the Community Edition version 9.0 of... CVE-2023-38882 6.1 MediumNovember 20, 2023
• os4ed opensis A reflected cross-site scripting (XSS) vulnerability in the Community Edition version 9.0 of... CVE-2023-38881 6.1 MediumNovember 20, 2023
• os4ed opensis The Community Edition version 9.0 of OS4ED's openSIS Classic has a broken access control... CVE-2023-38880 9.8 CriticalNovember 20, 2023
• os4ed opensis The Community Edition version 9.0 of OS4ED's openSIS Classic allows remote attackers to read... CVE-2023-38879 7.5 HighNovember 20, 2023
• os4ed opensis Open Solutions for Education, Inc openSIS Community Edition v8.0 and earlier is vulnerable to SQL... CVE-2022-45962 6.5 MediumFebruary 13, 2023
• os4ed opensis Due to lack of protection, parameter student_id in OpenSIS Classic 8.0 /modules/eligibility... CVE-2022-27041 7.5 HighApril 11, 2022
• os4ed opensis OS4ED openSIS 8.0 is affected by cross-site scripting (XSS) in EmailCheckOthers.php. An attacker... CVE-2021-40637 6.1 MediumMarch 3, 2022
• os4ed opensis OS4ED openSIS 8.0 is affected by SQL Injection in CheckDuplicateName.php, which can extract... CVE-2021-40636 7.5 HighMarch 3, 2022
• os4ed opensis OS4ED openSIS 8.0 is affected by SQL injection in ChooseCpSearch.php, ChooseRequestSearch.php. An... CVE-2021-40635 7.5 HighMarch 3, 2022
• os4ed opensis A SQL injection vulnerability exists in version 8.0 of openSIS when MySQL or MariaDB is used as... CVE-2021-41679 9.8 CriticalNovember 30, 2021
• os4ed opensis A SQL injection vulnerability exists in version 8.0 of openSIS when MySQL or MariaDB is used as... CVE-2021-41678 9.8 CriticalNovember 30, 2021
• os4ed opensis A SQL injection vulnerability exists in version 8.0 of openSIS when MySQL or MariaDB is used as... CVE-2021-41677 9.8 CriticalNovember 30, 2021
• os4ed opensis An SQL Injection vulnerability exists in openSIS Classic 8.0 via the 1) ADDR_CONT_USRN, 2)... CVE-2021-40618 9.8 CriticalOctober 12, 2021
• os4ed opensis An SQL Injection vulnerability exists in openSIS Community Edition version 8.0 via... CVE-2021-40617 Public exploit 9.8 CriticalOctober 11, 2021
• os4ed opensis Opensis-Classic Version 8.0 is affected by cross-site scripting (XSS). An unauthenticated user... CVE-2021-40542 6.1 MediumOctober 11, 2021
• os4ed opensis Opensis-Classic Version 8.0 is affected by a SQL injection vulnerability due to a lack of... CVE-2021-40543 9.8 CriticalOctober 11, 2021
• os4ed opensis OS4Ed OpenSIS Community 8.0 is vulnerable to a local file inclusion vulnerability in Modules.php ... CVE-2021-40651 Public exploit EPSS 17.9% 6.5 MediumSeptember 29, 2021
• os4ed opensis A SQL injection vulnerability exists in the Take Attendance functionality of OS4Ed's OpenSIS 8.0.... CVE-2021-40309 8.8 HighSeptember 24, 2021
• os4ed opensis OpenSIS Community Edition version 8.0 is affected by a cross-site scripting (XSS) vulnerability... CVE-2021-40310 5.4 MediumSeptember 24, 2021
• os4ed opensis OpenSIS Community Edition version <= 7.6 is affected by a reflected XSS vulnerability in... CVE-2021-27340 6.1 MediumSeptember 16, 2021
• os4ed opensis OpenSIS Community Edition version <= 7.6 is affected by a local file inclusion vulnerability in... CVE-2021-27341 9.8 CriticalSeptember 16, 2021
• os4ed opensis A SQL Injection vulnerability exists in openSIS 8.0 when MySQL (MariaDB) is being used as the... CVE-2021-39379 Public exploit 9.8 CriticalSeptember 1, 2021
• os4ed opensis A SQL Injection vulnerability exists in openSIS 8.0 when MySQL (MariaDB) is being used as the... CVE-2021-39377 Public exploit 9.8 CriticalSeptember 1, 2021
• os4ed opensis A SQL Injection vulnerability exists in openSIS 8.0 when MySQL (MariaDB) is being used as the... CVE-2021-39378 Public exploit EPSS 22.7% 9.8 CriticalSeptember 1, 2021
• Show olderLoading…