esusalla/vulnerability-research

Releases0

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2025-22926 ↗	Apr 3, 2025Thursday, 3 April 2025, 14:15	9.8 CRITICAL	—
An issue in OS4ED openSIS v8.0 through v9.1 allows attackers to execute a directory traversal by sending a crafted POST request to /Modules.php?modname=messaging/Inbox.php&modfunc=save&filename.
CVE-2025-22929 ↗	Apr 3, 2025Thursday, 3 April 2025, 14:15	9.8 CRITICAL	—
OS4ED openSIS v7.0 to v9.1 was discovered to contain a SQL injection vulnerability via the filter_id parameter at /students/StudentFilters.php.
CVE-2025-22930 ↗	Apr 3, 2025Thursday, 3 April 2025, 14:15	9.8 CRITICAL	—
OS4ED openSIS v7.0 to v9.1 was discovered to contain a SQL injection vulnerability via the groupid parameter at /messaging/Group.php.
CVE-2025-22931 ↗	Apr 3, 2025Thursday, 3 April 2025, 14:15	7.5 HIGH	—
An insecure direct object reference (IDOR) in the component /assets/stafffiles of OS4ED openSIS v7.0 to v9.1 allows unauthenticated attackers to access files uploaded by staff members.
CVE-2025-22927 ↗	Apr 3, 2025Thursday, 3 April 2025, 13:15	9.1 CRITICAL	—
An issue in OS4ED openSIS v8.0 through v9.1 allows attackers to execute a directory traversal by sending a crafted POST request to /Modules.php?modname=messaging/Inbox.php&modfunc=save&filename.
CVE-2025-22928 ↗	Apr 3, 2025Thursday, 3 April 2025, 13:15	9.8 CRITICAL	—
OS4ED openSIS v7.0 to v9.1 was discovered to contain a SQL injection vulnerability via the cp_id parameter at /modules/messages/Inbox.php.
CVE-2025-22923 ↗	Apr 2, 2025Wednesday, 2 April 2025, 21:15	8.8 HIGH	—
An issue in OS4ED openSIS v8.0 through v9.1 allows attackers to execute a directory traversal and delete files by sending a crafted POST request to /Modules.php?modname=users/Staff.php&removefile.
CVE-2025-22924 ↗	Apr 2, 2025Wednesday, 2 April 2025, 21:15	8.8 HIGH	—
OS4ED openSIS v7.0 through v9.1 contains a SQL injection vulnerability via the stu_id parameter at /modules/students/Student.php.
CVE-2025-22925 ↗	Apr 2, 2025Wednesday, 2 April 2025, 21:15	7.5 HIGH	—
OS4ED openSIS v7.0 to v9.1 was discovered to contain a SQL injection vulnerability via the table parameter at /attendance/AttendanceCodes.php. The remote, authenticated attacker requires the admin role to successfully exploit this vulnerability.