CVE-2025-26186

Impact

SQL Injection vulnerability in openSIS v.9.1 allows a remote attacker to execute arbitrary code via the id parameter in Ajax.php

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://github.com/OS4ED/openSIS-Classic/pull/330
• https://www.os4ed.com/