High severity7.5NVD Advisory· Published Apr 2, 2025· Updated Jun 17, 2026

CVE-2025-22925

Description

OS4ED openSIS v7.0 to v9.1 was discovered to contain a SQL injection vulnerability via the table parameter at /attendance/AttendanceCodes.php. The remote, authenticated attacker requires the admin role to successfully exploit this vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

OS4ED/openSISdescription

Patches

Vulnerability mechanics

References

github.com/esusalla/vulnerability-research/tree/main/CVE-2025-22925nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000