CVE-2014-9127中 6.5Open-School Community Edition 2.2 does not properly restrict access to the export functionality, which allows remote authenticated users to …
CVE-2014-9126中 6.1Multiple cross-site scripting (XSS) vulnerabilities in Open-School Community Edition 2.2 allow remote attackers to inject arbitrary web scri…
CVE-2019-14754緊急 9.8Open-School 3.0, and Community Edition 2.3, allows SQL Injection via the index.php?r=students/students/document id parameter.
CVE-2009-4208高 7.5SQL injection vulnerability in the os_news module in Open-school (OS) 1.0 allows remote attackers to execute arbitrary SQL commands via the …