Skip to content

Os4ed vulnerabilities

Products

Newest

os4ed opensisA SQL injection vulnerability exists in version 8.0 of openSIS when MySQL or MariaDB is used as...CVE-2021-40353Public exploit9.8 CriticalSeptember 1, 2021
os4ed opensisOpenSIS Community Edition through 7.6 is affected by incorrect access controls for the file...CVE-2020-274087.5 HighDecember 4, 2020
os4ed opensisOpenSIS Community Edition before 7.5 is affected by a cross-site scripting (XSS) vulnerability in...CVE-2020-274096.1 MediumDecember 4, 2020
os4ed opensisA remote code execution vulnerability exists in the install functionality of OS4Ed openSIS 7.4....CVE-2020-614410.0 CriticalSeptember 1, 2020
os4ed opensisA remote code execution vulnerability exists in the install functionality of OS4Ed openSIS 7.4....CVE-2020-614310.0 CriticalSeptember 1, 2020
os4ed opensisA remote code execution vulnerability exists in the Modules.php functionality of OS4Ed openSIS 7...CVE-2020-61429.9 CriticalSeptember 1, 2020
os4ed opensisSQL injection vulnerability exists in the password reset functionality of OS4Ed openSIS 7.3. The...CVE-2020-61409.8 CriticalSeptember 1, 2020
os4ed opensisSQL injection vulnerability exists in the password reset functionality of OS4Ed openSIS 7.3. The...CVE-2020-61399.8 CriticalSeptember 1, 2020
os4ed opensisSQL injection vulnerability exists in the password reset functionality of OS4Ed openSIS 7.3. The...CVE-2020-61389.8 CriticalSeptember 1, 2020
os4ed opensisSQL injection vulnerability exists in the password reset functionality of OS4Ed openSIS 7.3. The...CVE-2020-61379.8 CriticalSeptember 1, 2020
os4ed opensisAn exploitable SQL injection vulnerability exists in the login functionality of OS4Ed openSIS 7.3...CVE-2020-61419.8 CriticalSeptember 1, 2020
os4ed opensisAn exploitable SQL injection vulnerability exists in the DownloadWindow.php functionality of...CVE-2020-61366.4 MediumSeptember 1, 2020
os4ed opensisAn exploitable SQL injection vulnerability exists in the Validator.php functionality of OS4Ed...CVE-2020-61356.4 MediumSeptember 1, 2020
os4ed opensisSQL injection vulnerabilities exist in the ID parameters of OS4Ed openSIS 7.3 pages. The id...CVE-2020-61346.4 MediumSeptember 1, 2020
os4ed opensisSQL injection vulnerabilities exist in the ID parameters of OS4Ed openSIS 7.3 pages. The id...CVE-2020-61336.4 MediumSeptember 1, 2020
os4ed opensisSQL injection vulnerability exists in the ID parameters of OS4Ed openSIS 7.3 pages. The id...CVE-2020-61326.4 MediumSeptember 1, 2020
os4ed opensisSQL injection vulnerability exists in the CoursePeriodModal.php page of OS4Ed openSIS 7.3. A...CVE-2020-61286.4 MediumSeptember 1, 2020
os4ed opensisSQL injection vulnerability exists in the CoursePeriodModal.php page of OS4Ed openSIS 7.3. The id...CVE-2020-61276.4 MediumSeptember 1, 2020
os4ed opensisSQL injection vulnerability exists in the CoursePeriodModal.php page of OS4Ed openSIS 7.3. The...CVE-2020-61266.4 MediumSeptember 1, 2020
os4ed opensisAn exploitable SQL injection vulnerability exists in the GetSchool.php functionality of OS4Ed...CVE-2020-61256.4 MediumSeptember 1, 2020
os4ed opensisAn exploitable sql injection vulnerability exists in the email parameter functionality of OS4Ed...CVE-2020-61246.4 MediumSeptember 1, 2020
os4ed opensisAn exploitable sql injection vulnerability exists in the email parameter functionality of OS4Ed...CVE-2020-61236.4 MediumSeptember 1, 2020
os4ed opensisSQL injection vulnerability exists in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3....CVE-2020-61226.4 MediumSeptember 1, 2020
os4ed opensisSQL injection vulnerabilities exist in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3....CVE-2020-61216.4 MediumSeptember 1, 2020
os4ed opensisSQL injection vulnerability exists in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3....CVE-2020-61206.4 MediumSeptember 1, 2020
os4ed opensisSQL injection vulnerabilities exist in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3....CVE-2020-61196.4 MediumSeptember 1, 2020
os4ed opensisSQL injection vulnerabilities exist in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3....CVE-2020-61186.4 MediumSeptember 1, 2020
os4ed opensisSQL injection vulnerabilities exist in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3....CVE-2020-61176.4 MediumSeptember 1, 2020
os4ed opensisSQL injection vulnerabilities exist in the course_period_id parameters used in OS4Ed openSIS 7.3...CVE-2020-61316.4 MediumSeptember 1, 2020
os4ed opensisSQL injection vulnerabilities exist in the course_period_id parameters used in OS4Ed openSIS 7.3...CVE-2020-61306.4 MediumSeptember 1, 2020
os4ed opensisSQL injection vulnerabilities exist in the course_period_id parameters used in OS4Ed openSIS 7.3...CVE-2020-61296.4 MediumSeptember 1, 2020
os4ed opensisopenSIS Community Edition version 7.3 is vulnerable to SQL injection via the USERNAME parameter...CVE-2020-6637EPSS 17.6%9.8 CriticalAugust 24, 2020
os4ed opensisopenSIS through 7.4 allows Directory Traversal.CVE-2020-13383Public exploitEPSS 67.3%7.5 HighJuly 1, 2020
os4ed opensisopenSIS through 7.4 has Incorrect Access Control.CVE-2020-13382Public exploitEPSS 52.8%9.1 CriticalJuly 1, 2020
os4ed opensisopenSIS through 7.4 allows SQL Injection.CVE-2020-13381Public exploitEPSS 58.5%9.8 CriticalJuly 1, 2020
os4ed opensisopenSIS before 7.4 allows SQL Injection.CVE-2020-133809.8 CriticalJuly 1, 2020
os4ed opensisSQL injection vulnerability in openSIS 4.5 through 5.3 allows remote attackers to execute...CVE-2014-83667.5 HighOctober 20, 2014
os4ed opensisEval injection vulnerability in ajax.php in openSIS 4.5 through 5.2 allows remote attackers to...CVE-2013-1349Public exploitEPSS 21.9%7.5 HighDecember 9, 2013