81 matches found
CVE-2013-1349
OpenSIS CVE-2013-1349 affects OpenSIS 4.5–5.2. The vulnerability is in ajax.php: the parameter modname is not properly sanitized before being used in an eval call, allowing an attacker to inject and execute arbitrary PHP code. Multiple sources reference the code path through ajax.php and the modn...
CVE-2024-51211
openSIS-Classic 9.1 (OS4ED) contains a SQL injection in resetuserinfo.php via improper input validation of the username_stn_id parameter, enabling an attacker to inject arbitrary SQL commands. Affected component/file: resetuserinfo.php in OS4ED openSIS-Classic version 9.1. Root cause: insufficien...
CVE-2021-40635
OS4ED OpenSIS 8.0 is affected by a SQL injection in ChooseCpSearch.php and ChooseRequestSearch.php. The vulnerability arises from unsafely constructed queries that allow an attacker to inject SQL and potentially extract information from the database. This is documented across multiple feeds (NVD ...
CVE-2020-13383
openSIS CVE-2020-13383 affects versions up to 7.4 and allows unauthenticated exploitation through directory traversal leading to remote code execution. Multiple sources describe an exploit chain: an incorrect access control flaw grants access to scripts that should require authentication, followe...
CVE-2020-27409
OpenSIS Community Edition before 7.5 is affected by a cross-site scripting (XSS) vulnerability in SideForStudent.php via the modname parameter. The issue is consistently described across connected sources as CVE-2020-27409. No explicit exploit details or patch version are provided in the connecte...
CVE-2021-40651
CVE-2021-40651 affects OS4Ed OpenSIS Community 8.0. It is a local file inclusion in Modules.php (modname parameter) that can disclose arbitrary server files when the application has access to them, typically involving an authenticated user (e.g., login as Parent) to access the vulnerable page. Co...
CVE-2021-39377
openSIS 8.0 is vulnerable to SQL injection when running with MySQL/MariaDB, via the index.php username parameter. The vulnerability affects openSIS 8.0 and is caused by unsafely constructed SQL when processing the username field, enabling an attacker to issue SQL commands to the database. Connect...
CVE-2021-40542
Opensis-Classic 8.0 is affected by a Cross-Site Scripting (XSS) vulnerability via the link_url parameter in Ajax_url_encode.php. An unauthenticated attacker can inject and execute JavaScript in users’ browsers. The relevant connected data confirms affected software/version and the vulnerable para...
CVE-2021-40637
CVE-2021-40637 affects OS4ED OpenSIS 8.0. The vulnerability is a cross-site scripting (XSS) flaw in EmailCheckOthers.php, allowing an attacker to inject JavaScript to steal a user’s cookies and take over the user session. Documents reference affected product and the exact vulnerable file, with im...
CVE-2021-41691
CVE-2021-41691 affects the OS4Ed Open Source Information System Community (openSIS) v8.0. The vulnerability is a SQL injection in the POST endpoint "/TransferredOutModal.php" triggered by the parameters student_id and TRANSFER[SCHOOL] (notably in the path and parameter naming variants such as TRA...
CVE-2021-40310
OpenSIS Community Edition 8.0 is affected by a cross-site scripting (XSS) flaw in TakeAttendance.php via the cp_id_miss_attn parameter. The vulnerability context and PoC links are documented across multiple sources (e.g., PacketStorm and Exploit-DB entries), illustrating a reflected XSS payload u...
CVE-2021-40636
CVE-2021-40636 affects OS4ED OpenSIS 8.0 and involves a SQL injection in CheckDuplicateName.php that can extract information from the database. The connected sources confirm the vulnerability is due to SQL injection in that file and document the impact as information disclosure from the database....
CVE-2020-6136
OS4Ed openSIS 7.3 is affected by a SQL injection in DownloadWindow.php via the down_id parameter. The vulnerable code builds a query by directly embedding $_REQUEST['down_id'] (SELECT * FROM user_file_upload WHERE ID=...), enabling authenticated users to inject SQL. Talos’ report provides a teste...
CVE-2021-40353
OpenSIS CVE-2021-40353 affects OpenSIS 8.0 when using MySQL/MariaDB. The vulnerability is an SQL injection exploitable via the USERNAME parameter on index.php, consistent with prior CVE-2020-6637 fixes. Connected sources (NVD entry and related CVE records) confirm the vulnerable entry points and ...
CVE-2022-27041
OpenSIS/Solution: CVE-2022-27041 is a SQL injection vulnerability in OpenSIS Classic 8.0 where the parameter student_id in /modules/eligibility/Student.php can be abused to inject SQL and exfiltrate data. The connected documents (CNVD, RH Red Hat, OSV, CNVD, NVD, CVELIST, CVE records, and related...
CVE-2024-35584
The OpenSIS Open Source Community Edition (versions 8.0–9.1, possibly earlier) contains a SQL injection flaw in Ajax.php, ForWindow.php, ForExport.php, Modules.php, and functions/HackingLogFnc.php. The root cause is direct concatenation of the HTTP_X_FORWARDED_FOR header value into SQL INSERT sta...
CVE-2025-22923
OS4ED openSIS vulnerability CVE-2025-22923: A directory-traversal flaw in versions 8.0–9.1 can allow an attacker to delete files by sending a crafted POST to /Modules.php?modname=users/Staff.php&removefile. Connected sources confirm affected versions and the targeted endpoint; exploitation detail...
CVE-2023-38879
openSIS Classic Community Edition v9.0 is affected by a path traversal in the filename parameter of DownloadWindow.php, enabling unauthenticated remote reading of arbitrary server files. The Nuclei template for CVE-2023-38879 corroborates the vulnerability, naming the endpoint and impact. Root ca...
CVE-2024-46626
OS4ED openSIS-Classic v9.1 is affected by a SQL injection vulnerability (CVE-2024-46626) introduced via a crafted payload. Affected component is the OpenSIS-Classic software; root cause is an SQL injection in user-supplied input. Documented impact includes potential high severity, with the CVSS v...
CVE-2025-22924
CVE-2025-22924 affects OS4ED openSIS versions 7.0 through 9.1. The issue is a SQL injection vulnerability in the stu_id parameter exposed at /modules/students/Student.php, caused by improper handling of input in that endpoint. The CVSS 3.1 vector indicates Network attack vector, low attack comple...
CVE-2020-6123
OS4Ed openSIS 7.3 is affected by CVE-2020-6123 due to SQL injection in the email parameter of EmailCheck.php and EmailCheckOthers.php. The TALOS advisory provides concrete details: vulnerable code directly interpolates $_REQUEST['email'] into SQL queries without proper sanitization, enabling an a...
CVE-2020-6142
OS4Ed openSIS 7.3 is affected by CVE-2020-6142 through a local file inclusion in the Modules.php functionality. A vulnerability in the modname parameter allows an attacker to include arbitrary files via directory traversal and potentially execute remote PHP code. The weakness is exploitable via c...
CVE-2025-22926
CVE-2025-22926 affects OS4ED openSIS versions 8.0–9.1. The issue is a directory traversal vulnerability triggered by a crafted POST request to /Modules.php?modname=messaging/Inbox.php&modfunc=save&filename, allowing traversal outside the intended directory. Affects file- or path-based access as d...
CVE-2020-27408
OpenSIS Community Edition up to version 7.6 is affected by an access-control flaw in ResetUserInfo.php that lets an unauthenticated attacker change arbitrary user passwords. The root cause is improper access controls on the ResetUserInfo.php endpoint, enabling password modification without authen...
CVE-2020-6127
CVE-2020-6127 affects OS4Ed openSIS 7.3. The vulnerability is in CoursePeriodModal.php where multiple SQL injections exist via parameters id, course_period_id, and meet_date, exploitable by an authenticated HTTP request. Talos documents multiple SQL injection vectors in CoursePeriodModal.php (e.g...
CVE-2021-39378
CVE-2021-39378 affects openSIS 8.0 when using MySQL/MariaDB. A SQL Injection vulnerability allows an attacker to issue SQL commands to the database through the NamesList.php str parameter, with CVSS v3.1 base score 9.8 (CRITICAL) and impact on confidentiality, integrity, and availability reported...
CVE-2020-6637
OpenSIS Community Edition 7.3 is affected by CVE-2020-6637: a SQL injection through the USERNAME parameter in index.php. The Nuclei template confirms SQLi in OpenSIS 7.3 and describes the impact as the ability to execute arbitrary SQL queries, potentially leading to data access or manipulation. T...
CVE-2021-39379
CVE-2021-39379 involves a SQL Injection in openSIS 8.0 when using MySQL/MariaDB, exploitable through the ResetUserInfo.php password_stn_id parameter. The underlying issue allows an attacker to issue SQL commands to the MySQL/MariaDB database. Documented impact is high/critical (CVSS v3.1: 9.8, NE...
CVE-2025-22925
OS4ED openSIS (v7.0–v9.1) is affected by a SQL injection vulnerability in the /attendance/AttendanceCodes.php endpoint via the table parameter. The flaw requires an authenticated admin to exploit. Impact is high (availability impact stated) with no information on exploitation probability beyond t...
CVE-2021-40617
openSIS Community Edition 8.0 contains an SQL Injection in ForgotPassUserName.php (vulnerable component). The issue, as described across multiple sources, allows attackers to exploit a query flaw to access sensitive database information. Public PoCs/exploits demonstrate usage patterns like crafti...
CVE-2021-40618
CVE-2021-40618 describes an SQL injection in openSIS Classic 8.0 via the parameters ADDR_CONT_USRN, ADDR_CONT_PSWD, SECN_CONT_USRN, and SECN_CONT_PSWD in HoldAddressFields.php. The vulnerability could allow an attacker to obtain sensitive database information. Affected product is openSIS Classic ...
CVE-2025-22927
CVE-2025-22927 affects OS4ED openSIS v8.0–v9.1. A directory-traversal is possible via a crafted POST to /Modules.php?modname=messaging/Inbox.php&modfunc=save&filename, enabling access/alteration of files outside the intended directory. The CVSSv3.1 base score is 9.1 (CRITICAL) with Network attack...
CVE-2020-6126
OS4Ed openSIS 7.3 is affected by CVE-2020-6126 due to SQL injection in CoursePeriodModal.php. The vulnerable parameters are course_period_id, id, and meet_date, where unsanitized input is used in SQL queries, enabling authenticated attackers to trigger injections via crafted HTTP requests. Talos ...
CVE-2020-6143
CVE-2020-6143 affects OS4Ed openSIS 7.4 install functionality. The install/Step5.php writes Data.php using user-provided values, and the password field (line 122) can inject PHP code, enabling remote code execution via a crafted HTTP request. Exploitation results in arbitrary code execution on th...
CVE-2014-8366
CVE-2014-8366 affects openSIS 4.5–5.3, where an SQL injection flaw in index.php allows remote attackers to execute arbitrary SQL via the Username and password fields. Root cause is improper handling of user-supplied input in the login mechanism, enabling manipulation of the underlying database. R...
CVE-2023-38881
CVE-2023-38881 describes a reflected XSS in OS4ED’s openSIS Classic Community Edition v9.0. The vulnerability lies in how CalendarModal.php accepts four input parameters—calendar_id, school_date, month, and year—enabling remote attackers to inject and execute arbitrary JavaScript in a user’s brow...
CVE-2025-22929
CVE-2025-22929 affects OS4ED openSIS v7.0–v9.1. A SQL injection vulnerability exists in the filter_id parameter of /students/StudentFilters.php. The red-team example shows an authenticated remote attacker could retrieve arbitrary data by crafting a request to /Modules.php?modname=students/Student...
CVE-2021-40309
CVE-2021-40309 describes a SQL injection in OS4Ed’s OpenSIS 8.0, specifically in the TakeAttendance.php cp_id_miss_attn parameter. The vulnerability can be triggered by an authenticated user with access to the Take Attendance functionality, enabling an attacker to inject SQL queries. Connected so...
CVE-2020-6117
Summary: CVE-2020-6117 affects OS4Ed openSIS 7.3. The vulnerability is a SQL injection in the PHP page CheckDuplicateStudent.php, exploitable via the bday/byear/bmonth/fn/ln/mn parameters used to build a birthdate-based query. The TALOS report details the vulnerable code paths (lines where the qu...
CVE-2020-6118
OS4Ed openSIS 7.3 is affected by multiple SQL injection vulnerabilities in CheckDuplicateStudent.php, specifically via the parameters fn, mn, ln, byear, bmonth, and bday. Talos documents that the vulnerable code constructs dynamic SQL queries using user-supplied values without proper parameteriza...
CVE-2020-6120
OS4Ed openSIS 7.3 is vulnerable to SQL injection in CheckDuplicateStudent.php. TALOS documents multiple injectable parameters (fn, mn, ln, byear, bmonth, bday) used in a query that joins students and enrollment data, enabling authenticated HTTP requests to trigger the vulnerability. Affected code...
CVE-2020-6140
CVE-2020-6140 affects OS4Ed openSIS 7.3. Multiple SQL injection vulnerabilities exist in the password reset flow (ResetUserInfo.php) via parameters such as password_stf_email , uname , and username_stf_email . Root cause described as lack of input sanitization in the reset logic, enabling arbitra...
CVE-2021-41679
Open Solutions for Education openSIS 8.0 is affected by a SQL injection in InputFinalGrades.php (period parameter) when using MySQL/MariaDB. The root cause is lack of input validation in that endpoint, enabling attackers to craft SQL commands via the application database. According to the sources...
CVE-2020-6124
CVE-2020-6124 describes an exploitable SQL injection in OS4Ed openSIS 7.3, affecting the email parameter handling in two scripts: EmailCheckOthers.php and EmailCheck.php . The vulnerability allows an attacker to trigger SQL Injection via authenticated HTTP requests that supply crafted email value...
CVE-2020-6141
OS4Ed openSIS 7.3 is affected by a SQL injection in the login path. The vulnerability arises from unsanitized input used in a login query (USERNAME/PASSWORD), specifically the code path that builds a SQL statement in opensis/index.php (line 117) without proper escaping. TALOS details confirm a hi...
CVE-2020-6130
OS4Ed openSIS 7.3 is affected by multiple SQL injection vulnerabilities in the course_period_id parameter across several pages (MassDropSessionSet.php, MassScheduleSessionSet.php, CpSessionSet.php) and related code paths. The underlying cause is improper handling of COURSE_PERIOD_ID, enabling an ...
CVE-2023-38885
OpenSIS Classic Community Edition version 9.0 is described as lacking cross-site request forgery (CSRF) protection throughout the entire application. The vulnerability could allow an attacker to trick an authenticated user into performing any kind of state-changing request. The connected sources ...
CVE-2025-22931
OS4ED openSIS vulnerable to an insecure direct object reference (IDOR) in the /assets/stafffiles component affecting versions 7.0 through 9.1. Unauthenticated attackers can access files uploaded by staff members. The CVSS 3.1 base score is 7.5 (HIGH); attack vector NETWORK, scope UNCHANGED, confi...