Approved changes feed: RSS · Atom

cpe:2.3:a:os4ed:opensis:9.1:*:*:*:*:*:*:*

part: a version: 9.1 update: *

VendorOs4Ed (6cbf6094-577e-5750-94b1-eb009ed7d213)
ProductOpensis (0102caef-70bb-54b8-8259-c29cfbe58261)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/os4ed/opensis-classic purl2cpe 2026-06-01 10:13:28.387180

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-26186 vulnerable 2026-06-08 07:12:51.486710 Details available
SQL Injection vulnerability in openSIS v.9.1 allows a remote attacker to execute arbitrary code via the id parameter in Ajax.php
Published: 2025-07-15T00:00:00.000Z
Updated: 2025-07-15T17:32:43.490Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-51211 vulnerable 2026-06-08 06:52:11.861053 Details available
SQL injection vulnerability exists in OS4ED openSIS-Classic Version 9.1, specifically in the resetuserinfo.php file. The vulnerability is due to improper input validation of the $username_stn_id parameter, which can be manipulated by an attacker to inject arbitrary SQL commands.
Published: 2024-11-08T00:00:00.000Z
Updated: 2024-11-21T16:24:26.645Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-46626 vulnerable 2026-06-08 06:48:10.208378 Details available
OS4ED openSIS-Classic v9.1 was discovered to contain a SQL injection vulnerability via a crafted payload.
Published: 2024-10-02T00:00:00.000Z
Updated: 2024-10-02T17:02:46.353Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.