Skip to content
OpenAdvisories

Vendor

OS4ED

8 known vulnerabilities.

Products

openSIS-Classic 8
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.1
    CVE-2026-8406

    openSIS Classic 9.3 - Insecure Direct Object Reference in Sent Mail

    openSIS Classic 9.3 contains an insecure direct object reference vulnerability in the messaging module. Any authenticated user with access to the messaging module can request sent-message details from modules/messaging/SentMail.php by supplying an arbitrary m…

    OS4ED openSIS-Classic