CVE-2025-26186

Mô tả

Tham khảo

• OS4ED/openSIS-Classic#330 · Issue Tracking
• os4ed.com · Product

Lỗ hổng khác của opensis

• CVE-2026-11944TRUNG BÌNH 6.5openSIS Classic 9.3 contains an authenticated path traversal vulnerability in the legacy messaging sent-mail attachment download functionali…
• CVE-2025-65594CAO 8.1OpenSIS 9.2 and below is vulnerable to Incorrect Access Control in Student.php, which allows an authenticated low-privilege user to perform …
• CVE-2021-41691NGHIÊM TRỌNG 9.8A SQL injection vulnerability exists in OS4Ed Open Source Information System Community v8.0 via the "student_id" and "TRANSFER{SCHOOL]" para…
• CVE-2025-22931CAO 7.5An insecure direct object reference (IDOR) in the component /assets/stafffiles of OS4ED openSIS v7.0 to v9.1 allows unauthenticated attacker…
• CVE-2025-22930NGHIÊM TRỌNG 9.8OS4ED openSIS v7.0 to v9.1 was discovered to contain a SQL injection vulnerability via the groupid parameter at /messaging/Group.php.