os4ed Vulnerability Advisory Catalog

Total 81 security vulnerabilities recorded for os4ed software and firmware.

← Back to All Vendors
CVE-2020-6118 HIGH
Component: opensis

SQL injection vulnerabilities exist in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3. The bmonth parameter in the page CheckDuplicateStudent...

📅 2020-09-01
CVSS 8.8 Dossier →
CVE-2020-6117 HIGH
Component: opensis

SQL injection vulnerabilities exist in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3. The bday parameter in the page CheckDuplicateStudent.p...

📅 2020-09-01
CVSS 8.8 Dossier →
CVE-2020-6637 CRITICAL
Component: opensis

openSIS Community Edition version 7.3 is vulnerable to SQL injection via the USERNAME parameter of index.php....

📅 2020-08-24
CVSS 9.8 Dossier →
CVE-2020-13383 HIGH
Component: opensis

openSIS through 7.4 allows Directory Traversal....

📅 2020-07-01
CVSS 7.5 Dossier →
CVE-2020-13382 CRITICAL
Component: opensis

openSIS through 7.4 has Incorrect Access Control....

📅 2020-07-01
CVSS 9.1 Dossier →
CVE-2020-13381 CRITICAL
Component: opensis

openSIS through 7.4 allows SQL Injection....

📅 2020-07-01
CVSS 9.8 Dossier →
CVE-2020-13380 CRITICAL
Component: opensis

openSIS before 7.4 allows SQL Injection....

📅 2020-07-01
CVSS 9.8 Dossier →
CVE-2014-8366 UNKNOWN
Component: opensis

SQL injection vulnerability in openSIS 4.5 through 5.3 allows remote attackers to execute arbitrary SQL commands via the Username and password to inde...

📅 2014-10-20
CVSS 7.5 Dossier →
CVE-2013-1349 UNKNOWN
Component: opensis

Eval injection vulnerability in ajax.php in openSIS 4.5 through 5.2 allows remote attackers to execute arbitrary PHP code via the modname parameter....

📅 2013-12-09
CVSS 7.5 Dossier →
Page 4 of 4 (81 Total Records)
← Previous Page