Description
An issue in OS4ED openSIS v8.0 through v9.1 allows attackers to execute a directory traversal and delete files by sending a crafted POST request to /Modules.php?modname=users/Staff.php&removefile.
High · 8.8
CVE-2025-22923
EUVD-2025-9653GHSA-5prh-r43c-x8ww
An issue in OS4ED openSIS v8.0 through v9.1 allows attackers to execute a directory traversal and delete files by sending a crafted POST re…
Published Apr 2, 2025 · Updated Apr 3, 2025 · Assigned by mitre