CVE-2021-41691

概要

参考情報

• OS4ED/openSIS-Classic · Product
• opensis.com · Product
• resources.s4e.io/blog/opensis-student-information-system-0-day-vulnerability-cve-2021-41691 · Third Party Advisory

opensis のその他の脆弱性

• CVE-2026-11944中 6.5openSIS Classic 9.3 contains an authenticated path traversal vulnerability in the legacy messaging sent-mail attachment download functionali…
• CVE-2025-65594高 8.1OpenSIS 9.2 and below is vulnerable to Incorrect Access Control in Student.php, which allows an authenticated low-privilege user to perform …
• CVE-2025-26186高 8.1SQL Injection vulnerability in openSIS v.9.1 allows a remote attacker to execute arbitrary code via the id parameter in Ajax.php
• CVE-2025-22931高 7.5An insecure direct object reference (IDOR) in the component /assets/stafffiles of OS4ED openSIS v7.0 to v9.1 allows unauthenticated attacker…
• CVE-2025-22930緊急 9.8OS4ED openSIS v7.0 to v9.1 was discovered to contain a SQL injection vulnerability via the groupid parameter at /messaging/Group.php.