CVE-2026-4842

The CVE-2026-4842 entry concerns the itsourcecode Online Enrollment System 1.0. It targets the parameter handling code in /sms/grades/index.php?view=edit&id=1, where manipulating deptid enables an SQL injection. The vulnerability is exploitable remotely and publicly disclosed. Affected component:...

CVE-2021-41679

A SQL injection vulnerability exists in version 8.0 of openSIS when MySQL or MariaDB is used as the application database. An attacker can then issue the SQL command through the /opensis/modules/grades/InputFinalGrades.php, period parameter...

Open Solutions For Education openSIS SQL注入漏洞

openSIS is an open source student information management system from Open Solutions for Education. openSIS is vulnerable to a SQL injection vulnerability that originates in /opensis/modules/grades/InputFinalGrades.php due to a lack of validation of external input SQL statement validation. An...