← Database

CVE-2026-8406

N/A CVSS: N/A Published: 2026-06-11 Modified: 2026-06-17

Description

openSIS Classic 9.3 contains an insecure direct object reference vulnerability in the messaging module. Any authenticated user with access to the messaging module can request sent-message details from modules/messaging/SentMail.php by supplying an arbitrary mail_id value.

Affected Platforms

Unknown

Weakness Type

CWE-639

References