os4ed Vulnerability Advisory Catalog

Total 81 security vulnerabilities recorded for os4ed software and firmware.

← Back to All Vendors
CVE-2020-6142 CRITICAL
Component: opensis

A remote code execution vulnerability exists in the Modules.php functionality of OS4Ed openSIS 7.3. A specially crafted HTTP request can cause local f...

📅 2020-09-01
CVSS 9.8 Dossier →
CVE-2020-6140 CRITICAL
Component: opensis

SQL injection vulnerability exists in the password reset functionality of OS4Ed openSIS 7.3. The password_stf_email parameter in the password reset pa...

📅 2020-09-01
CVSS 9.8 Dossier →
CVE-2020-6139 CRITICAL
Component: opensis

SQL injection vulnerability exists in the password reset functionality of OS4Ed openSIS 7.3. The username_stf_email parameter in the password reset pa...

📅 2020-09-01
CVSS 9.8 Dossier →
CVE-2020-6138 CRITICAL
Component: opensis

SQL injection vulnerability exists in the password reset functionality of OS4Ed openSIS 7.3. The uname parameter in the password reset page /opensis/R...

📅 2020-09-01
CVSS 9.8 Dossier →
CVE-2020-6137 CRITICAL
Component: opensis

SQL injection vulnerability exists in the password reset functionality of OS4Ed openSIS 7.3. The password_stf_email parameter in the password reset pa...

📅 2020-09-01
CVSS 9.8 Dossier →
CVE-2020-6141 CRITICAL
Component: opensis

An exploitable SQL injection vulnerability exists in the login functionality of OS4Ed openSIS 7.3. A specially crafted HTTP request can lead to SQL in...

📅 2020-09-01
CVSS 9.8 Dossier →
Component: opensis

An exploitable SQL injection vulnerability exists in the DownloadWindow.php functionality of OS4Ed openSIS 7.3. A specially crafted HTTP request can l...

📅 2020-09-01
CVSS 8.8 Dossier →
Component: opensis

An exploitable SQL injection vulnerability exists in the Validator.php functionality of OS4Ed openSIS 7.3. A specially crafted HTTP request can lead t...

📅 2020-09-01
CVSS 8.8 Dossier →
Component: opensis

SQL injection vulnerabilities exist in the ID parameters of OS4Ed openSIS 7.3 pages. The id parameter in the page MassDropModal.php is vulnerable to S...

📅 2020-09-01
CVSS 8.8 Dossier →
Component: opensis

SQL injection vulnerabilities exist in the ID parameters of OS4Ed openSIS 7.3 pages. The id parameter in the page CourseMoreInfo.php is vulnerable to ...

📅 2020-09-01
CVSS 8.8 Dossier →
Component: opensis

SQL injection vulnerability exists in the ID parameters of OS4Ed openSIS 7.3 pages. The id parameter in the page ChooseCP.php is vulnerable to SQL inj...

📅 2020-09-01
CVSS 8.8 Dossier →
Component: opensis

SQL injection vulnerability exists in the CoursePeriodModal.php page of OS4Ed openSIS 7.3. A specially crafted HTTP request can lead to SQL injection....

📅 2020-09-01
CVSS 8.8 Dossier →
Component: opensis

SQL injection vulnerability exists in the CoursePeriodModal.php page of OS4Ed openSIS 7.3. The id parameter in the page CoursePeriodModal.php is vulne...

📅 2020-09-01
CVSS 8.8 Dossier →
Component: opensis

SQL injection vulnerability exists in the CoursePeriodModal.php page of OS4Ed openSIS 7.3. The course_period_id parameter in the page CoursePeriodModa...

📅 2020-09-01
CVSS 8.8 Dossier →
Component: opensis

An exploitable SQL injection vulnerability exists in the GetSchool.php functionality of OS4Ed openSIS 7.3. A specially crafted HTTP request can lead t...

📅 2020-09-01
CVSS 8.8 Dossier →
Component: opensis

An exploitable sql injection vulnerability exists in the email parameter functionality of OS4Ed openSIS 7.3. The email parameter in the page EmailChec...

📅 2020-09-01
CVSS 8.8 Dossier →
Component: opensis

SQL injection vulnerabilities exist in the course_period_id parameters used in OS4Ed openSIS 7.3 pages. The course_period_id parameter in the page Mas...

📅 2020-09-01
CVSS 8.8 Dossier →
Component: opensis

SQL injection vulnerabilities exist in the course_period_id parameters used in OS4Ed openSIS 7.3 pages. The course_period_id parameter in the page Mas...

📅 2020-09-01
CVSS 8.8 Dossier →
Component: opensis

SQL injection vulnerabilities exist in the course_period_id parameters used in OS4Ed openSIS 7.3 pages. The course_period_id parameter in the page CpS...

📅 2020-09-01
CVSS 8.8 Dossier →
Component: opensis

An exploitable sql injection vulnerability exists in the email parameter functionality of OS4Ed openSIS 7.3. The email parameter in the page EmailChec...

📅 2020-09-01
CVSS 8.8 Dossier →
Component: opensis

SQL injection vulnerability exists in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3. The mn parameter in the page CheckDuplicateStudent.php ...

📅 2020-09-01
CVSS 8.8 Dossier →
Component: opensis

SQL injection vulnerabilities exist in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3. The ln parameter in the page CheckDuplicateStudent.php...

📅 2020-09-01
CVSS 8.8 Dossier →
Component: opensis

SQL injection vulnerability exists in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3. The fn parameter in the page CheckDuplicateStudent.php ...

📅 2020-09-01
CVSS 8.8 Dossier →
Component: opensis

SQL injection vulnerabilities exist in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3. The byear parameter in the page CheckDuplicateStudent....

📅 2020-09-01
CVSS 8.8 Dossier →
Page 3 of 4 (81 Total Records)