6 matches found
CVE-2025-22924
OS4ED openSIS v7.0 through v9.1 contains a SQL injection vulnerability via the stuid parameter at /modules/students/Student.php...
CVE-2025-22924
OS4ED openSIS v7.0 through v9.1 contains a SQL injection vulnerability via the stuid parameter at /modules/students/Student.php...
CVE-2025-22924
OS4ED openSIS v7.0 through v9.1 contains a SQL injection vulnerability via the stuid parameter at /modules/students/Student.php...
CVE-2025-22924
The OS4ED openSIS student information system, versions v7.0 through v9.1 , is vulnerable to a SQL injection flaw. This vulnerability exists in the stu_id parameter at the /modules/students/Student.php API endpoint. An attacker could potentially exploit this to interact with the underlying MySQL d...