OS4ED vulnerabilities
8 published CVEs name OS4ED among the affected products.
- 8Published CVEs8 of them scored
- 8Last 12 monthspublished in the last year
- 1Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-91107
openSIS Classic 9.3 - Insecure Direct Object Reference (IDOR)
OS4ED · openSIS-Classic
Critical9.3 - CVE-2026-103117
OS4ED openSIS-Classic Save Data DatabaseInc.php db_properties sql injection
OS4ED · openSIS-Classic
Medium5.1 - CVE-2026-103116
OS4ED openSIS-Classic Student List Search Endpoint GetStuListFnc.php DBQuery sql injection
OS4ED · openSIS-Classic
Medium5.3 - CVE-2026-103115
OS4ED openSIS-Classic Student Search CustomFieldsFnc.php sql injection
OS4ED · openSIS-Classic
Medium5.3 - CVE-2026-103114
OS4ED openSIS-Classic Assignment Management Endpoint Assignments.php DBQuery_assignment sql injection
OS4ED · openSIS-Classic
Medium5.3 - CVE-2026-103113
OS4ED openSIS-Classic General Information Tab Student.php save action sql injection
OS4ED · openSIS-Classic
Medium5.1 - CVE-2026-11944
openSIS Classic 9.3 - Authenticated path traversal in SentMail attachment download
OS4ED · openSIS-Classic
Medium5.3 - CVE-2026-8406
openSIS Classic 9.3 - Insecure Direct Object Reference in Sent Mail
OS4ED · openSIS-Classic
High7.1