81 matches found
CVE-2013-1349
OpenSIS CVE-2013-1349 affects OpenSIS 4.5–5.2. The vulnerability is in ajax.php: the parameter modname is not properly sanitized before being used in an eval call, allowing an attacker to inject and execute arbitrary PHP code. Multiple sources reference the code path through ajax.php and the modn...
CVE-2021-40635
OS4ED OpenSIS 8.0 is affected by a SQL injection in ChooseCpSearch.php and ChooseRequestSearch.php. The vulnerability arises from unsafely constructed queries that allow an attacker to inject SQL and potentially extract information from the database. This is documented across multiple feeds (NVD ...
CVE-2024-51211
A critical SQL injection vulnerability exists in OS4ED openSIS-Classic Version 9.1 (and potentially 9.0) within the resetuserinfo.php file. The root cause is improper input validation of the $username_stn_id parameter, which allows an unauthenticated remote attacker to inject arbitrary SQL comman...
CVE-2020-13383
openSIS CVE-2020-13383 affects versions up to 7.4 and allows unauthenticated exploitation through directory traversal leading to remote code execution. Multiple sources describe an exploit chain: an incorrect access control flaw grants access to scripts that should require authentication, followe...
CVE-2020-27409
OpenSIS Community Edition before 7.5 is affected by a cross-site scripting (XSS) vulnerability in SideForStudent.php via the modname parameter. The issue is consistently described across connected sources as CVE-2020-27409. No explicit exploit details or patch version are provided in the connecte...
CVE-2021-41691
A SQL injection vulnerability exists in OS4Ed Open Source Information System Community v8.0 . The flaw is caused by the improper handling of the student_id and TRANSFER{SCHOOL] parameters within a POST request sent to the /TransferredOutModal.php endpoint. Successful exploitation allows a remote ...
CVE-2021-40636
CVE-2021-40636 affects OS4ED OpenSIS 8.0 and involves a SQL injection in CheckDuplicateName.php that can extract information from the database. The connected sources confirm the vulnerability is due to SQL injection in that file and document the impact as information disclosure from the database....
CVE-2021-40651
CVE-2021-40651 affects OS4Ed OpenSIS Community 8.0. It is a local file inclusion in Modules.php (modname parameter) that can disclose arbitrary server files when the application has access to them, typically involving an authenticated user (e.g., login as Parent) to access the vulnerable page. Co...
CVE-2021-40637
CVE-2021-40637 affects OS4ED OpenSIS 8.0. The vulnerability is a cross-site scripting (XSS) flaw in EmailCheckOthers.php, allowing an attacker to inject JavaScript to steal a user’s cookies and take over the user session. Documents reference affected product and the exact vulnerable file, with im...
CVE-2021-39377
openSIS 8.0 is vulnerable to SQL injection when running with MySQL/MariaDB, via the index.php username parameter. The vulnerability affects openSIS 8.0 and is caused by unsafely constructed SQL when processing the username field, enabling an attacker to issue SQL commands to the database. Connect...
CVE-2021-40542
Opensis-Classic 8.0 is affected by a Cross-Site Scripting (XSS) vulnerability via the link_url parameter in Ajax_url_encode.php. An unauthenticated attacker can inject and execute JavaScript in users’ browsers. The relevant connected data confirms affected software/version and the vulnerable para...
CVE-2021-40310
OpenSIS Community Edition 8.0 is affected by a cross-site scripting (XSS) flaw in TakeAttendance.php via the cp_id_miss_attn parameter. The vulnerability context and PoC links are documented across multiple sources (e.g., PacketStorm and Exploit-DB entries), illustrating a reflected XSS payload u...
CVE-2020-6136
OS4Ed openSIS 7.3 is affected by a SQL injection in DownloadWindow.php via the down_id parameter. The vulnerable code builds a query by directly embedding $_REQUEST['down_id'] (SELECT * FROM user_file_upload WHERE ID=...), enabling authenticated users to inject SQL. Talos’ report provides a teste...
CVE-2024-35584
A SQL injection vulnerability exists in OpenSIS Community Edition versions 9.1 through 8.0 (and possibly earlier) due to a lack of input sanitization. The application takes arbitrary values from the X-Forwarded-For header and directly appends them into SQL INSERT statements. Specifically, the vul...
CVE-2021-40353
OpenSIS CVE-2021-40353 affects OpenSIS 8.0 when using MySQL/MariaDB. The vulnerability is an SQL injection exploitable via the USERNAME parameter on index.php, consistent with prior CVE-2020-6637 fixes. Connected sources (NVD entry and related CVE records) confirm the vulnerable entry points and ...
CVE-2022-27041
OpenSIS/Solution: CVE-2022-27041 is a SQL injection vulnerability in OpenSIS Classic 8.0 where the parameter student_id in /modules/eligibility/Student.php can be abused to inject SQL and exfiltrate data. The connected documents (CNVD, RH Red Hat, OSV, CNVD, NVD, CVELIST, CVE records, and related...
CVE-2025-22924
The OS4ED openSIS student information system, versions v7.0 through v9.1 , is vulnerable to a SQL injection flaw. This vulnerability exists in the stu_id parameter at the /modules/students/Student.php API endpoint. An attacker could potentially exploit this to interact with the underlying MySQL d...
CVE-2021-39379
CVE-2021-39379 involves a SQL Injection in openSIS 8.0 when using MySQL/MariaDB, exploitable through the ResetUserInfo.php password_stn_id parameter. The underlying issue allows an attacker to issue SQL commands to the MySQL/MariaDB database. Documented impact is high/critical (CVSS v3.1: 9.8, NE...
CVE-2020-6123
OS4Ed openSIS 7.3 is affected by CVE-2020-6123 due to SQL injection in the email parameter of EmailCheck.php and EmailCheckOthers.php. The TALOS advisory provides concrete details: vulnerable code directly interpolates $_REQUEST['email'] into SQL queries without proper sanitization, enabling an a...
CVE-2024-46626
The OS4ED openSIS-Classic v9.1 student information system is vulnerable to a SQL injection vulnerability. An attacker can exploit this via a crafted payload, specifically using the X-Forwarded-For header parameter in a POST request sent to /Ajax.php . The vulnerability allows for boolean-based bl...
CVE-2025-22923
OS4ED openSIS versions v8.0 through v9.1 are vulnerable to a directory traversal flaw. An attacker can send a crafted POST request to the /Modules.php?modname=users/Staff.php&removefile endpoint to perform unauthorized file deletion . No patched versions or specific remediation steps are currentl...
CVE-2021-41679
Open Solutions for Education openSIS 8.0 is affected by a SQL injection in InputFinalGrades.php (period parameter) when using MySQL/MariaDB. The root cause is lack of input validation in that endpoint, enabling attackers to craft SQL commands via the application database. According to the sources...
CVE-2023-38879
openSIS Classic Community Edition v9.0 is affected by a path traversal in the filename parameter of DownloadWindow.php, enabling unauthenticated remote reading of arbitrary server files. The Nuclei template for CVE-2023-38879 corroborates the vulnerability, naming the endpoint and impact. Root ca...
CVE-2020-6637
OpenSIS Community Edition 7.3 is affected by CVE-2020-6637: a SQL injection through the USERNAME parameter in index.php. The Nuclei template confirms SQLi in OpenSIS 7.3 and describes the impact as the ability to execute arbitrary SQL queries, potentially leading to data access or manipulation. T...
CVE-2021-39378
CVE-2021-39378 affects openSIS 8.0 when using MySQL/MariaDB. A SQL Injection vulnerability allows an attacker to issue SQL commands to the database through the NamesList.php str parameter, with CVSS v3.1 base score 9.8 (CRITICAL) and impact on confidentiality, integrity, and availability reported...
CVE-2020-6127
CVE-2020-6127 affects OS4Ed openSIS 7.3. The vulnerability is in CoursePeriodModal.php where multiple SQL injections exist via parameters id, course_period_id, and meet_date, exploitable by an authenticated HTTP request. Talos documents multiple SQL injection vectors in CoursePeriodModal.php (e.g...
CVE-2020-6126
OS4Ed openSIS 7.3 is affected by CVE-2020-6126 due to SQL injection in CoursePeriodModal.php. The vulnerable parameters are course_period_id, id, and meet_date, where unsanitized input is used in SQL queries, enabling authenticated attackers to trigger injections via crafted HTTP requests. Talos ...
CVE-2021-40618
CVE-2021-40618 describes an SQL injection in openSIS Classic 8.0 via the parameters ADDR_CONT_USRN, ADDR_CONT_PSWD, SECN_CONT_USRN, and SECN_CONT_PSWD in HoldAddressFields.php. The vulnerability could allow an attacker to obtain sensitive database information. Affected product is openSIS Classic ...
CVE-2025-22927
The student information management system OS4ED openSIS (versions v8.0 through v9.1 ) is vulnerable to a directory traversal issue. An attacker can execute this by sending a crafted POST request to the /Modules.php?modname=messaging/Inbox.php&modfunc=save&filename endpoint. This vulnerability pot...
CVE-2020-27408
OpenSIS Community Edition up to version 7.6 is affected by an access-control flaw in ResetUserInfo.php that lets an unauthenticated attacker change arbitrary user passwords. The root cause is improper access controls on the ResetUserInfo.php endpoint, enabling password modification without authen...
CVE-2020-6142
OS4Ed openSIS 7.3 is affected by CVE-2020-6142 through a local file inclusion in the Modules.php functionality. A vulnerability in the modname parameter allows an attacker to include arbitrary files via directory traversal and potentially execute remote PHP code. The weakness is exploitable via c...
CVE-2025-22926
OS4ED openSIS versions v8.0 through v9.1 are vulnerable to a directory traversal issue. Attackers can exploit this by sending a crafted POST request to the /Modules.php?modname=messaging/Inbox.php&modfunc=save&filename endpoint, potentially allowing them to access or manipulate files outside the ...
CVE-2020-6118
OS4Ed openSIS 7.3 is affected by multiple SQL injection vulnerabilities in CheckDuplicateStudent.php, specifically via the parameters fn, mn, ln, byear, bmonth, and bday. Talos documents that the vulnerable code constructs dynamic SQL queries using user-supplied values without proper parameteriza...
CVE-2025-22925
OS4ED openSIS versions v7.0 through v9.1 are vulnerable to a SQL injection vulnerability located at the /attendance/AttendanceCodes.php endpoint via the table parameter. A remote, authenticated attacker with admin role privileges can exploit this flaw. To mitigate risk, it is recommended to disab...
CVE-2021-40617
openSIS Community Edition 8.0 contains an SQL Injection in ForgotPassUserName.php (vulnerable component). The issue, as described across multiple sources, allows attackers to exploit a query flaw to access sensitive database information. Public PoCs/exploits demonstrate usage patterns like crafti...
CVE-2014-8366
CVE-2014-8366 affects openSIS 4.5–5.3, where an SQL injection flaw in index.php allows remote attackers to execute arbitrary SQL via the Username and password fields. Root cause is improper handling of user-supplied input in the login mechanism, enabling manipulation of the underlying database. R...
CVE-2020-6117
Summary: CVE-2020-6117 affects OS4Ed openSIS 7.3. The vulnerability is a SQL injection in the PHP page CheckDuplicateStudent.php, exploitable via the bday/byear/bmonth/fn/ln/mn parameters used to build a birthdate-based query. The TALOS report details the vulnerable code paths (lines where the qu...
CVE-2020-6143
CVE-2020-6143 affects OS4Ed openSIS 7.4 install functionality. The install/Step5.php writes Data.php using user-provided values, and the password field (line 122) can inject PHP code, enabling remote code execution via a crafted HTTP request. Exploitation results in arbitrary code execution on th...
CVE-2025-22929
OS4ED openSIS versions v7.0 through v9.1 are vulnerable to a SQL injection vulnerability affecting the filter_id parameter at the /students/StudentFilters.php endpoint. A remote, authenticated attacker —regardless of their role (e.g., admin, teacher, or student)—can exploit this by making a reque...
CVE-2021-40543
OpenSIS OpenSIS Classic 8.0 is affected by a SQL injection in PasswordCheck.php due to lack of sanitization of input data for $_GET['usrid'] and $_GET['prof_id']. The vulnerability allows an attacker to inject SQL and, as described in CNVD/CNNVD variants, could enable retrieval of database inform...
CVE-2023-38881
CVE-2023-38881 describes a reflected XSS in OS4ED’s openSIS Classic Community Edition v9.0. The vulnerability lies in how CalendarModal.php accepts four input parameters—calendar_id, school_date, month, and year—enabling remote attackers to inject and execute arbitrary JavaScript in a user’s brow...
CVE-2020-13380
OpenSIS 7.4 and earlier are affected by a SQL Injection vulnerability. The issue arises from insufficient validation of externally supplied SQL statements in database-backed components, enabling potentially unauthorized data access and manipulation. Affected parts include multiple endpoints (e.g....
CVE-2020-6128
OS4Ed openSIS 7.3 is affected by SQL injection in CoursePeriodModal.php, specifically via meet_date, and also via course_period_id and id parameters as detailed by Talos. The vulnerability enables an authenticated attacker to trigger SQL injection through crafted HTTP requests to CoursePeriodModa...
CVE-2023-38885
OpenSIS Classic Community Edition version 9.0 is described as lacking cross-site request forgery (CSRF) protection throughout the entire application. The vulnerability could allow an attacker to trick an authenticated user into performing any kind of state-changing request. The connected sources ...
CVE-2020-6141
OS4Ed openSIS 7.3 is affected by a SQL injection in the login path. The vulnerability arises from unsanitized input used in a login query (USERNAME/PASSWORD), specifically the code path that builds a SQL statement in opensis/index.php (line 117) without proper escaping. TALOS details confirm a hi...
CVE-2021-40309
CVE-2021-40309 describes a SQL injection in OS4Ed’s OpenSIS 8.0, specifically in the TakeAttendance.php cp_id_miss_attn parameter. The vulnerability can be triggered by an authenticated user with access to the Take Attendance functionality, enabling an attacker to inject SQL queries. Connected so...
CVE-2020-6124
CVE-2020-6124 describes an exploitable SQL injection in OS4Ed openSIS 7.3, affecting the email parameter handling in two scripts: EmailCheckOthers.php and EmailCheck.php . The vulnerability allows an attacker to trigger SQL Injection via authenticated HTTP requests that supply crafted email value...
CVE-2020-6138
OS4Ed openSIS 7.3 contains multiple SQL injection vulnerabilities in the password reset flow. The uname parameter on /opensis/ResetUserInfo.php (and related fields) can be exploited to run arbitrary SQL, potentially exposing usernames, emails, and other data. Attackers could trigger via crafted H...