OP
Product
openSIS-Classic
9
CVEs
0
On KEV
9.8
Max CVSS
6
New 30D
Severity mix
Critical 2High 1Medium 6Low 0
Watch
Add openSIS-Classic to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-11944 | 6.5 | Jul 14 | openSIS Classic 9.3 - Authenticated path traversal in SentMail attachment download Affected: 9.3 |
| CVE-2026-103116 | 6.3 | Sep 30 | OS4ED openSIS-Classic Student List Search Endpoint GetStuListFnc.php DBQuery sql injection Affected: 9.0; 9.1; 9.2; 9.3 |
| CVE-2026-103115 | 6.3 | Sep 30 | OS4ED openSIS-Classic Student Search CustomFieldsFnc.php sql injection Affected: 9.0; 9.1; 9.2; 9.3 |
| CVE-2026-103114 | 6.3 | Sep 30 | OS4ED openSIS-Classic Assignment Management Endpoint Assignments.php DBQuery_assignment sql injection Affected: 9.0; 9.1; 9.2; 9.3 |
| CVE-2026-103117 | 4.7 | Sep 30 | OS4ED openSIS-Classic Save Data DatabaseInc.php db_properties sql injection Affected: 9.0; 9.1; 9.2; 9.3 |
| CVE-2026-103113 | 4.7 | Sep 30 | OS4ED openSIS-Classic General Information Tab Student.php save action sql injection Affected: 9.0; 9.1; 9.2; 9.3 |
Showing 6
