OS4ED openSIS v7.0 through v9.1 contains a SQL injection vulnerability via the stu_id parameter at /modules/students/Student.php.

Published Apr 2, 2025 · Updated Apr 3, 2025 · Assigned by mitre