OS4ED openSIS-Classic

• CVE-2026-91107 Critical 9.3 openSIS Classic 9.3 - Insecure Direct Object Reference (IDOR) 0.2%
• CVE-2026-103117 Medium 4.7 OS4ED openSIS-Classic Save Data DatabaseInc.php db_properties sql injection 0.3%
• CVE-2026-103116 Medium 6.3 OS4ED openSIS-Classic Student List Search Endpoint GetStuListFnc.php DBQuery sql injection 0.2%
• CVE-2026-103115 Medium 6.3 OS4ED openSIS-Classic Student Search CustomFieldsFnc.php sql injection 0.2%
• CVE-2026-103114 Medium 6.3 OS4ED openSIS-Classic Assignment Management Endpoint Assignments.php DBQuery_assignment sql injection 0.2%
• CVE-2026-103113 Medium 4.7 OS4ED openSIS-Classic General Information Tab Student.php save action sql injection 0.2%
• CVE-2026-11944 Medium 5.3 openSIS Classic 9.3 - Authenticated path traversal in SentMail attachment download 0.5%
• CVE-2026-8406 High 7.1 openSIS Classic 9.3 - Insecure Direct Object Reference in Sent Mail 0.3%