Approved changes feed: RSS · Atom
cpe:2.3:a:os4ed:opensis:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Os4Ed (6cbf6094-577e-5750-94b1-eb009ed7d213) |
|---|---|
| Product | Opensis (0102caef-70bb-54b8-8259-c29cfbe58261) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/os4ed/opensis-classic |
purl2cpe | 2026-06-01 10:13:28.382773 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-65594 |
vulnerable | 2026-06-08 07:39:20.930684 |
Details available
OpenSIS 9.2 and below is vulnerable to Incorrect Access Control in Student.php, which allows an authenticated low-privilege user to perform unauthorized database write operations relating to the data of other users.
Published: 2025-12-09T00:00:00.000Z
Updated: 2026-07-05T01:23:34.807Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-22931 |
vulnerable | 2026-06-08 07:10:55.007038 |
Details available
An insecure direct object reference (IDOR) in the component /assets/stafffiles of OS4ED openSIS v7.0 to v9.1 allows unauthenticated attackers to access files uploaded by staff members.
Published: 2025-04-03T00:00:00.000Z
Updated: 2025-04-21T18:26:32.580Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-22928 |
vulnerable | 2026-06-08 07:10:55.005907 |
Details available
OS4ED openSIS v7.0 to v9.1 was discovered to contain a SQL injection vulnerability via the cp_id parameter at /modules/messages/Inbox.php.
Published: 2025-04-03T00:00:00.000Z
Updated: 2025-04-21T18:33:52.217Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-22927 |
vulnerable | 2026-06-08 07:10:55.005529 |
Details available
An issue in OS4ED openSIS v8.0 through v9.1 allows attackers to execute a directory traversal by sending a crafted POST request to /Modules.php?modname=messaging/Inbox.php&modfunc=save&filename.
Published: 2025-04-03T00:00:00.000Z
Updated: 2025-04-21T18:34:54.189Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-22923 |
vulnerable | 2026-06-08 07:10:55.002176 |
Details available
An issue in OS4ED openSIS v8.0 through v9.1 allows attackers to execute a directory traversal and delete files by sending a crafted POST request to /Modules.php?modname=users/Staff.php&removefile.
Published: 2025-04-02T00:00:00.000Z
Updated: 2025-04-03T15:20:57.438Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-46626 |
vulnerable | 2026-06-08 06:48:10.207434 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13383 |
vulnerable | 2026-06-08 05:18:00.538393 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13382 |
vulnerable | 2026-06-08 05:18:00.538071 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13381 |
vulnerable | 2026-06-08 05:18:00.537622 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13380 |
vulnerable | 2026-06-08 05:18:00.537070 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.