What’s Vulnerable › Products

OS4ED openSIS-Classic vulnerabilities

88 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 21 published in the last 12 months.

Check whether your OS4ED openSIS-Classic version is affected

Latest OS4ED openSIS-Classic vulnerabilities

• CVE-2026-91107 — openSIS Classic 9.3 - Insecure Direct Object Reference (IDOR) (CVSS 9.3)
• CVE-2026-103117 — OS4ED openSIS-Classic Save Data DatabaseInc.php db_properties sql injection (CVSS 4.7)
• CVE-2026-103116 — OS4ED openSIS-Classic Student List Search Endpoint GetStuListFnc.php DBQuery sql injection (CVSS 6.3)
• CVE-2026-103115 — OS4ED openSIS-Classic Student Search CustomFieldsFnc.php sql injection (CVSS 6.3)
• CVE-2026-103114 — OS4ED openSIS-Classic Assignment Management Endpoint Assignments.php DBQuery_assignment sql injection (CVSS 6.3)
• CVE-2026-103113 — OS4ED openSIS-Classic General Information Tab Student.php save action sql injection (CVSS 4.7)
• CVE-2026-11944 — openSIS Classic 9.3 - Authenticated path traversal in SentMail attachment download (CVSS 6.5)
• CVE-2026-8406 — openSIS Classic 9.3 - Insecure Direct Object Reference in Sent Mail (CVSS 7.1)
• CVE-2025-65594 — (CVSS 8.1)
• CVE-2025-26186 — (CVSS 8.1)
• CVE-2021-41691 — (CVSS 9.8)
• CVE-2025-22931 — (CVSS 7.5)
• CVE-2025-22930 — (CVSS 9.8)
• CVE-2025-22929 — (CVSS 9.8)
• CVE-2025-22926 — (CVSS 9.8)
• CVE-2025-22928 — (CVSS 9.8)
• CVE-2025-22927 — (CVSS 9.1)
• CVE-2025-22925 — (CVSS 7.5)
• CVE-2025-22924 — (CVSS 8.8)
• CVE-2025-22923 — (CVSS 8.8)
• CVE-2024-51211 — (CVSS 9.8)
• CVE-2024-35584 — (CVSS 8.8)
• CVE-2024-46626 — (CVSS 8.8)
• CVE-2023-38885 — (CVSS 8.8)
• CVE-2023-38884 — (CVSS 7.5)