Francoisjacquet vulnerabilities

Products

• Rosariosis 10
• Francoisjacquet/rosariosis 8

Newest

• francoisjacquet rosariosis RosarioSIS before 12.9 Improper Authorization via Student Billing Mass Assignment CVE-2026-121732 2.1 LowNovember 3, 2026
• francoisjacquet rosariosis RosarioSIS before 12.9 SQL Injection via period_id in Attendance Absence Report CVE-2026-121731 8.7 HighNovember 3, 2026
• francoisjacquet rosariosis RosarioSIS before 12.9.2 Reflected XSS via menu_id in MenuReports.php CVE-2026-116217 5.3 MediumOctober 26, 2026
• francoisjacquet rosariosis RosarioSIS before 12.9.1 Missing Authorization in Teacher Save Handlers CVE-2026-116010 5.3 MediumOctober 24, 2026
• francoisjacquet rosariosis RosarioSIS before 12.9 Path Traversal in File Deletion via filename Parameter CVE-2026-93014 7.1 HighSeptember 17, 2026
• francoisjacquet rosariosis francoisjacquet RosarioSIS Modules.php cross-site request forgery CVE-2026-19786 5.3 MediumAugust 14, 2026
• francoisjacquet rosariosis francoisjacquet RosarioSIS Student Medical Medical.inc.php sql injection CVE-2026-19785 5.3 MediumAugust 14, 2026
• francoisjacquet rosariosis francoisjacquet RosarioSIS Referrals.php DBUpdate authorization CVE-2026-19784 5.3 MediumAugust 14, 2026
• francoisjacquet rosariosis francoisjacquet RosarioSIS Add Portal Note cross site scripting CVE-2024-3138 Disputed 3.5 LowApril 1, 2024
• francoisjacquet francoisjacquet/rosariosis, rosariosis +1 more Storage of Sensitive Data in a Mechanism without Access Control in francoisjacquet/rosariosis CVE-2023-2665 Fix available 7.5 HighMay 12, 2023
• francoisjacquet francoisjacquet/rosariosis, rosariosis +1 more Improper Access Control in francoisjacquet/rosariosis CVE-2023-2202 Fix available 4.6 MediumApril 21, 2023
• francoisjacquet francoisjacquet/rosariosis, rosariosis +1 more Exposure of Sensitive Information to an Unauthorized Actor in francoisjacquet/rosariosis CVE-2023-0994 Fix available 8.1 HighFebruary 24, 2023
• francoisjacquet francoisjacquet/rosariosis, rosariosis +1 more Improper Handling of Length Parameter Inconsistency in francoisjacquet/rosariosis CVE-2022-2714 Fix available 8.1 HighSeptember 6, 2022
• francoisjacquet francoisjacquet/rosariosis, rosariosis +1 more Cross-site Scripting (XSS) - Stored in francoisjacquet/rosariosis CVE-2022-3072 Fix available 8.0 HighSeptember 1, 2022
• francoisjacquet francoisjacquet/rosariosis, rosariosis +1 more SQL Injection in francoisjacquet/rosariosis CVE-2022-2067 Fix available 8.8 HighJune 13, 2022
• francoisjacquet francoisjacquet/rosariosis, rosariosis +1 more Cross-site Scripting (XSS) - Stored in francoisjacquet/rosariosis CVE-2022-2036 Fix available 9.0 CriticalJune 9, 2022
• francoisjacquet francoisjacquet/rosariosis, rosariosis +1 more Cross-site Scripting (XSS) - Stored in francoisjacquet/rosariosis CVE-2022-1997 Fix available 8.8 HighJune 6, 2022
• francoisjacquet rosariosis, rosariosis student information system +1 more Reflected cross-site scripting in francoisjacquet/rosariosis CVE-2020-13278 Fix available 6.1 MediumAugust 12, 2020