Os4ed Opensis-Classic
8 CVEs affecting Os4ed Opensis-Classic. Latest disclosed: 2026-10-05. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-11944 | Medium | 6.5 | 2026-07-14 | openSIS Classic 9.3 contains an authenticated path traversal vulnerability in the legacy messaging sent-mail attachment download functionality that allows an a… |
CVE-2026-103116 | Medium | 6.3 | 2026-09-30 | A weakness has been identified in OS4ED openSIS-Classic up to 9.3. This impacts the function DBQuery of the file functions/GetStuListFnc.php of the component S… |
CVE-2026-103115 | Medium | 6.3 | 2026-09-30 | A security flaw has been discovered in OS4ED openSIS-Classic up to 9.3. This affects an unknown function of the file functions/CustomFieldsFnc.php of the compo… |
CVE-2026-103114 | Medium | 6.3 | 2026-09-30 | A vulnerability was identified in OS4ED openSIS-Classic up to 9.3. The impacted element is the function DBQuery_assignment of the file modules/grades/Assignmen… |
CVE-2026-103117 | Medium | 4.7 | 2026-09-30 | A security vulnerability has been detected in OS4ED openSIS-Classic up to 9.3. Affected is the function db_properties of the file functions/DatabaseInc.php of… |
CVE-2026-103113 | Medium | 4.7 | 2026-09-30 | A vulnerability was determined in OS4ED openSIS-Classic up to 9.3. The affected element is the function save action of the file modules/students/Student.php of… |
CVE-2026-91107 | | 2026-10-05 | openSIS Classic 9.3 allows an authenticated user with the built-in teacher role can select an arbitrary staff record through staff_id and cause the School Info… | |
CVE-2026-8406 | | 2026-06-11 | openSIS Classic 9.3 contains an insecure direct object reference vulnerability in the messaging module. Any authenticated user with access to the messaging mod… |