Advisories · Technology
OS4ED openSIS-Classic.
Every CVE that names OS4ED openSIS-Classic among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.3 CriticalCritical · CVSS 9+
openSIS Classic 9.3 - Insecure Direct Object Reference (IDOR)
- OS4ED openSIS-Classic
- Broken access control
- CVSS 5.1 Medium
OS4ED openSIS-Classic Save Data DatabaseInc.php db_properties sql injection
- OS4ED openSIS-Classic
- Other injection
- SQL injection
- CVSS 5.3 Medium
OS4ED openSIS-Classic Student List Search Endpoint GetStuListFnc.php DBQuery sql injection
- OS4ED openSIS-Classic
- Other injection
- SQL injection
- CVSS 5.3 Medium
OS4ED openSIS-Classic Student Search CustomFieldsFnc.php sql injection
- OS4ED openSIS-Classic
- Other injection
- SQL injection
- CVSS 5.3 Medium
OS4ED openSIS-Classic Assignment Management Endpoint Assignments.php DBQuery_assignment sql injection
- OS4ED openSIS-Classic
- Other injection
- SQL injection
- CVSS 5.1 Medium
OS4ED openSIS-Classic General Information Tab Student.php save action sql injection
- OS4ED openSIS-Classic
- Other injection
- SQL injection
- CVSS 5.3 Medium
openSIS Classic 9.3 - Authenticated path traversal in SentMail attachment download
- OS4ED openSIS-Classic
- Path traversal
- CVSS 7.1 High
openSIS Classic 9.3 - Insecure Direct Object Reference in Sent Mail
- OS4ED openSIS-Classic
- Broken access control