OP
Product
Opensis
81
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 31High 37Medium 11Low 0
Watch
Add Opensis to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-11944 | 6.5 | Jul 14 | openSIS Classic 9.3 - Authenticated path traversal in SentMail attachment download Affected: 9.3 |
| CVE-2022-45962 | 6.5 | Feb 13 | Open Solutions for Education, Inc openSIS Community Edition v8.0 and earlier is vulnerable to SQL Injection via CalendarModal.php Affected: through 8.0 |
| CVE-2021-40651 | 6.5 | Sep 29 | OS4Ed OpenSIS Community 8.0 is vulnerable to a local file inclusion vulnerability in Modules.php (modname parameter), which can disclose arbitrary file from the server's… Affected: 8.0 |
| CVE-2023-38883 | 6.1 | Nov 20 | A reflected cross-site scripting (XSS) vulnerability in the Community Edition version 9.0 of OS4ED's openSIS Classic allows remote attackers to execute arbitrary JavaScript in the… Affected: 9.0 |
| CVE-2023-38881 | 6.1 | Nov 20 | A reflected cross-site scripting (XSS) vulnerability in the Community Edition version 9.0 of OS4ED's openSIS Classic allows remote attackers to execute arbitrary JavaScript in the… Affected: 9.0 |
| CVE-2023-38882 | 6.1 | Nov 20 | A reflected cross-site scripting (XSS) vulnerability in the Community Edition version 9.0 of OS4ED's openSIS Classic allows remote attackers to execute arbitrary JavaScript in the… Affected: 9.0 |
| CVE-2021-40637 | 6.1 | Mar 3 | OS4ED openSIS 8.0 is affected by cross-site scripting (XSS) in EmailCheckOthers.php Affected: 8.0 |
| CVE-2021-40542 | 6.1 | Oct 11 | Opensis-Classic Version 8.0 is affected by cross-site scripting (XSS) Affected: 8.0 |
| CVE-2021-27340 | 6.1 | Sep 16 | OpenSIS Community Edition version <= 7.6 is affected by a reflected XSS vulnerability in EmailCheck.php via the "opt" parameter Affected: through 7.6 |
| CVE-2020-27409 | 6.1 | Dec 4 | OpenSIS Community Edition before 7.5 is affected by a cross-site scripting (XSS) vulnerability in SideForStudent.php via the modname parameter Affected: before 7.5 |
| CVE-2021-40310 | 5.4 | Sep 24 | OpenSIS Community Edition version 8.0 is affected by a cross-site scripting (XSS) vulnerability in the TakeAttendance.php via the cp_id_miss_attn parameter Affected: 8.0 |
Showing 11
