CVE-2026-103113

Publié : 30 septembre 2026

Modifié : 30 septembre 2026

Score CVSS

4.7

MEDIUM

Description détaillée

A vulnerability was determined in OS4ED openSIS-Classic up to 9.3. The affected element is the function save action of the file modules/students/Student.php of the component General Information Tab. Executing a manipulation of the argument students can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

Références et Patchs

https://github.com/OS4ED/openSIS-Classic/https://github.com/OS4ED/openSIS-Classic/issues/475 https://vuldb.com/cve/CVE-2026-103113 https://vuldb.com/submit/954959 https://vuldb.com/vuln/411869 https://vuldb.com/vuln/411869/cti

Dernières Vulnérabilités

CVE-2026-97302

Unauthenticated Sensitive Data Exposure in MPG <= 4.2.3 versions.

VOIR DÉTAILS

CVE-2026-97301

Contributor Cross Site Scripting (XSS) in Cool Formkit Lite <= 2.7.8 versions.

VOIR DÉTAILS

CVE-2026-97299

Unauthenticated Cross Site Request Forgery (CSRF) in Razorpay Payment Links for WooCommerce <= 2.1.5 versions.

VOIR DÉTAILS