Skip to content
OpenAdvisories

Vendor

OS4ED

8 known vulnerabilities.

Products

openSIS-Classic 8
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2026-91107

    openSIS Classic 9.3 - Insecure Direct Object Reference (IDOR)

    openSIS Classic 9.3 allows an authenticated user with the built-in teacher role can select an arbitrary staff record through staff_id and cause the School Information update path to reset that selected account's password.

    OS4ED openSIS-Classic