Login Request a demo
OP
Product
openSIS-Classic
by OS4ED · last CVE Oct 5, 2026
9
CVEs
0
On KEV
9.8
Max CVSS
6
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 2High 1Medium 6Low 0
Severity
All severities9Critical2High1Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add openSIS-Classic to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-51211
9.8
2%
Nov 8
SQL injection vulnerability exists in OS4ED openSIS-Classic Version 9.1, specifically in the resetuserinfo.php file
Affected: 9.1
CVE-2026-91107
9.3
0%
Oct 5
openSIS Classic 9.3 - Insecure Direct Object Reference (IDOR)
Affected: 9.3
CVE-2026-8406
7.1
0%
Jun 11
openSIS Classic 9.3 - Insecure Direct Object Reference in Sent Mail
Affected: 9.3
CVE-2026-11944
6.5
0%
Jul 14
openSIS Classic 9.3 - Authenticated path traversal in SentMail attachment download
Affected: 9.3
CVE-2026-103116
6.3
0%
Sep 30
OS4ED openSIS-Classic Student List Search Endpoint GetStuListFnc.php DBQuery sql injection
Affected: 9.0; 9.1; 9.2; 9.3
CVE-2026-103115
6.3
0%
Sep 30
OS4ED openSIS-Classic Student Search CustomFieldsFnc.php sql injection
Affected: 9.0; 9.1; 9.2; 9.3
CVE-2026-103114
6.3
0%
Sep 30
OS4ED openSIS-Classic Assignment Management Endpoint Assignments.php DBQuery_assignment sql injection
Affected: 9.0; 9.1; 9.2; 9.3
CVE-2026-103117
4.7
0%
Sep 30
OS4ED openSIS-Classic Save Data DatabaseInc.php db_properties sql injection
Affected: 9.0; 9.1; 9.2; 9.3
CVE-2026-103113
4.7
0%
Sep 30
OS4ED openSIS-Classic General Information Tab Student.php save action sql injection
Affected: 9.0; 9.1; 9.2; 9.3
Showing 9