6 matches found
CVE-2025-22924
OS4ED openSIS v7.0 through v9.1 contains a SQL injection vulnerability via the stuid parameter at /modules/students/Student.php...
CVE-2025-22924
OS4ED openSIS v7.0 through v9.1 contains a SQL injection vulnerability via the stuid parameter at /modules/students/Student.php...
CVE-2025-22924
OS4ED openSIS v7.0 through v9.1 contains a SQL injection vulnerability via the stuid parameter at /modules/students/Student.php...
CVE-2025-22924
OS4ED openSIS v7.0 through v9.1 contains a SQL injection vulnerability via the stuid parameter at /modules/students/Student.php...
CVE-2025-22924
OS4ED openSIS versions v7.0 through v9.1 are susceptible to a SQL injection vulnerability. The flaw exists in the stu_id parameter at the /modules/students/Student.php API endpoint. An attacker could exploit this to interact with the underlying MySQL database. To mitigate this risk, it is recomme...
