Browse CVEs

HIGH 7.5 CVE-2023-2665 Storage of Sensitive Data in a Mechanism without Access Control in GitHub repository francoisjacquet/rosariosis prior to 11.0. Rosariosis 11.0+ Fix from $1,9502023-05-12 MEDIUM 5.4 CVE-2023-29918 RosarioSIS 10.8.4 is vulnerable to CSV injection via the Periods Module. Rosariosis No fix yet Fix from $1,6002023-05-02 MEDIUM 6.5 CVE-2023-2202 Improper Access Control in GitHub repository francoisjacquet/rosariosis prior to 10.9.3. Rosariosis 10.9.3+ Fix from $1,6002023-04-21 HIGH 7.5 CVE-2023-0994 Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository francoisjacquet/rosariosis prior to 10.8.2. Rosariosis 10.8.2+ Fix from $1,9502023-02-24 CRITICAL 9.8 CVE-2022-2714 Improper Handling of Length Parameter Inconsistency in GitHub repository francoisjacquet/rosariosis prior to 10.0. Rosariosis 10.1+ Fix from $2,3002022-09-06 MEDIUM 5.4 CVE-2022-3072 Cross-site Scripting (XSS) - Stored in GitHub repository francoisjacquet/rosariosis prior to 8.9.3. Rosariosis 8.9.3+ Fix from $1,6002022-09-01 CRITICAL 9.1 CVE-2022-2067 SQL Injection in GitHub repository francoisjacquet/rosariosis prior to 9.0. Rosariosis 9.0+ Fix from $2,3002022-06-13 MEDIUM 5.4 CVE-2022-2036 Cross-site Scripting (XSS) - Stored in GitHub repository francoisjacquet/rosariosis prior to 9.0.1. Rosariosis 9.0.1+ Fix from $1,6002022-06-09 MEDIUM 5.4 CVE-2022-1997 Cross-site Scripting (XSS) - Stored in GitHub repository francoisjacquet/rosariosis prior to 9.0. Rosariosis 9.0+ Fix from $1,6002022-06-08 CRITICAL 9.8 CVE-2021-44567EPSS 23% An unauthenticated SQL Injection vulnerability exists in RosarioSIS before 7.6.1 via the votes parameter in ProgramFunctions/PortalPollsNotes.fnc.php. Rosariosis 7.6.1+ Fix from $2,3002022-02-24 MEDIUM 5.4 CVE-2021-44565 A Cross Site Scripting (XSS) vulnerability exists in RosarioSIS before 7.6.1 via the xss_clean function in classes/Security.php, which allows remote … Rosariosis 7.6.1+ Fix from $1,6002022-02-24 MEDIUM 5.4 CVE-2021-44566 A Cross Site Scripting (XSS) vulnerability exists in RosarioSIS before 4.3 via the SanitizeMarkDown function in ProgramFunctions/MarkDownHTML.fnc.php. Rosariosis 4.3+ Fix from $1,6002022-02-24 MEDIUM 6.1 CVE-2021-45416 Reflected Cross-site scripting (XSS) vulnerability in RosarioSIS 8.2.1 allows attackers to inject arbitrary HTML via the search_term parameter in the… Rosariosis Patch available Fix from $1,6002022-02-01 CRITICAL 9.8 CVE-2021-44427EPSS 51% An unauthenticated SQL Injection vulnerability in Rosario Student Information System (aka rosariosis) before 8.1.1 allows remote attackers to execute… Rosariosis 8.1.1+ Fix from $2,3002021-11-29 MEDIUM 6.1 CVE-2020-13278 Reflected Cross-Site Scripting vulnerability in Modules.php in RosarioSIS Student Information System < 6.5.1 allows remote attackers to execute arbit… Student Information System 6.5.1+ Fix from $1,6002020-08-12 MEDIUM 6.1 CVE-2020-15718EPSS 6% RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-supplied input by the PrintSchedules.php script. A remote attacker could… Rosariosis Patch available Fix from $1,6002020-07-15 MEDIUM 6.1 CVE-2020-15716EPSS 6% RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-supplied input by the Preferences.php script. A remote attacker could ex… Rosariosis Patch available Fix from $1,6002020-07-15 MEDIUM 6.1 CVE-2020-15717 RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-supplied input by the Search.inc.php script. A remote attacker could exp… Rosariosis Patch available Fix from $1,6002020-07-15 MEDIUM 6.1 CVE-2020-15721 RosarioSIS through 6.8-beta allows modules/Custom/NotifyParents.php XSS because of the href attributes for AddStudents.php and User.php. Rosariosis after 6.7.2 Fix from $1,6002020-07-14