Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2025-22925

OS4ED openSIS v7.0 to v9.1 was discovered to contain a SQL injection vulnerability via the table parameter at /attendance/AttendanceCodes.php. The remote, authenticated attacker requires the admin role to successfully exploit this vulnerability.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 30.8%
CVSS Severity
CVSS v3 Score 7.5
Products affected by CVE-2025-22925
  • Os4ed » Opensis » Version: 7.3
    cpe:2.3:a:os4ed:opensis:7.3
  • Os4ed » Opensis » Version: 7.6
    cpe:2.3:a:os4ed:opensis:7.6
  • Os4ed » Opensis » Version: 8.0
    cpe:2.3:a:os4ed:opensis:8.0
  • Os4ed » Opensis » Version: 9.0
    cpe:2.3:a:os4ed:opensis:9.0


Contact Us

Shodan ® - All rights reserved