CVE-2026-103113 | OS4ED openSIS-Classic up to 9.3 General Information Tab Student.php save action students sql injection (Issue 475)

A vulnerability, which was classified as problematic, was found in OS4ED openSIS-Classic up to 9.3. The affected element is the function save action of the file modules/students/Student.php of the component General Information Tab. Executing a manipulation of the argument students can lead to sql injection.

This vulnerability appears as CVE-2026-103113. The attack may be performed from remote. In addition, an exploit is available.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More