All issues

Search results

openSIS Classic 9.3 - SQL Injection in Student Data Save Form (Reflected)

Status: Open.

#477 In OS4ED/openSIS-Classic;

· 360AlphaLab opened on Sep 1, 2026

openSIS Classic 9.3 - SQL Injection in Report Card Grade Student Search (Reflected)

Status: Open.

#476 In OS4ED/openSIS-Classic;

· 360AlphaLab opened on Sep 1, 2026

openSIS Classic 9.3 - Second-Order SQL Injection in Custom Student Fields (Stored)

Status: Open.

#475 In OS4ED/openSIS-Classic;

· 360AlphaLab opened on Sep 1, 2026

openSIS Classic 9.3 - SQL Injection in Gradebook Assignments Management (Stored)

Status: Open.

#474 In OS4ED/openSIS-Classic;

· 360AlphaLab opened on Sep 1, 2026

openSIS Classic 9.3 - SQL Injection in Student Information Update (Stored)

Status: Open.

#473 In OS4ED/openSIS-Classic;

· 360AlphaLab opened on Sep 1, 2026

CVE-2026-8406 Incomplete Fix: Residual Message Authorization Bypasses

Status: Open.

#472 In OS4ED/openSIS-Classic;

· arbor-s opened on Aug 26, 2026

course period setup>configuration not appearing for secondary teacher but does show up for primary teacher

Status: Open.

#471 In OS4ED/openSIS-Classic;

· fcortesjp opened on Jul 16, 2026

[Security] SQL Injection + Reflected XSS + Local File Inclusion in openSIS-Classic

Status: Open.

#470 In OS4ED/openSIS-Classic;

· abdurazzoqovjavohir700-dev opened on Jun 18, 2026

syear is null

Status: Open.

#465 In OS4ED/openSIS-Classic;

· bookking3000 opened on Mar 24, 2026

Security: Systemic IDOR across messaging, courses, and student records

Status: Open.

#435 In OS4ED/openSIS-Classic;

· lighthousekeeper1212 opened on Mar 3, 2026

uploading course periods in bulk

Status: Open.

#351 In OS4ED/openSIS-Classic;

· fcortesjp opened on Feb 12, 2026

How to make it so I don't have to enter Schedule Type when creating a course period? - Question and/or Feature Request

Status: Open.

#348 In OS4ED/openSIS-Classic;

· fcortesjp opened on Feb 10, 2026