Rosariosis vulnerabilities

Products

• Rosariosis 21

Newest

• francoisjacquet rosariosis RosarioSIS before 12.9 Path Traversal in File Deletion via filename Parameter CVE-2026-93014 7.1 HighSeptember 17, 2026
• francoisjacquet rosariosis francoisjacquet RosarioSIS Add Portal Note cross site scripting CVE-2024-3138 Disputed 3.5 LowApril 1, 2024
• francoisjacquet francoisjacquet/rosariosis, rosariosis +1 more Storage of Sensitive Data in a Mechanism without Access Control in francoisjacquet/rosariosis CVE-2023-2665 Fix available 7.5 HighMay 12, 2023
• rosariosis RosarioSIS vulnerable to CSV Injection CVE-2023-29918 Public exploit 5.4 MediumMay 2, 2023
• francoisjacquet francoisjacquet/rosariosis, rosariosis +1 more Improper Access Control in francoisjacquet/rosariosis CVE-2023-2202 Fix available 4.6 MediumApril 21, 2023
• francoisjacquet francoisjacquet/rosariosis, rosariosis +1 more Exposure of Sensitive Information to an Unauthorized Actor in francoisjacquet/rosariosis CVE-2023-0994 Fix available 8.1 HighFebruary 24, 2023
• francoisjacquet francoisjacquet/rosariosis, rosariosis +1 more Improper Handling of Length Parameter Inconsistency in francoisjacquet/rosariosis CVE-2022-2714 Fix available 8.1 HighSeptember 6, 2022
• francoisjacquet francoisjacquet/rosariosis, rosariosis +1 more Cross-site Scripting (XSS) - Stored in francoisjacquet/rosariosis CVE-2022-3072 Fix available 8.0 HighSeptember 1, 2022
• francoisjacquet francoisjacquet/rosariosis, rosariosis +1 more SQL Injection in francoisjacquet/rosariosis CVE-2022-2067 Fix available 8.8 HighJune 13, 2022
• francoisjacquet francoisjacquet/rosariosis, rosariosis +1 more Cross-site Scripting (XSS) - Stored in francoisjacquet/rosariosis CVE-2022-2036 Fix available 9.0 CriticalJune 9, 2022
• francoisjacquet francoisjacquet/rosariosis, rosariosis +1 more Cross-site Scripting (XSS) - Stored in francoisjacquet/rosariosis CVE-2022-1997 Fix available 8.8 HighJune 6, 2022
• rosariosis SQL injection in francoisjacquet/rosariosis CVE-2021-44567 Public exploitFix available EPSS 23.1% 9.8 CriticalFebruary 22, 2022
• rosariosis Cross site scripting in francoisjacquet/rosariosis CVE-2021-44566 Fix available 5.4 MediumFebruary 22, 2022
• rosariosis Cross site scripting in francoisjacquet/rosariosis CVE-2021-44565 Fix available 5.4 MediumFebruary 22, 2022
• rosariosis RosarioSIS XSS Vulnerability CVE-2021-45416 Public exploitFix available 6.1 MediumFebruary 1, 2022
• rosariosis SQL Injection in rosariosis CVE-2021-44427 Fix available EPSS 50.6% 9.8 CriticalNovember 29, 2021
• francoisjacquet rosariosis, rosariosis student information system +1 more Reflected cross-site scripting in francoisjacquet/rosariosis CVE-2020-13278 Fix available 6.1 MediumAugust 12, 2020
• rosariosis RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-supplied input by... CVE-2020-15718 Public exploit 6.1 MediumJuly 15, 2020
• rosariosis RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-supplied input by... CVE-2020-15717 6.1 MediumJuly 15, 2020
• rosariosis RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-supplied input by... CVE-2020-15716 Public exploit 6.1 MediumJuly 15, 2020
• rosariosis Cross-site Scripting in RosarioSIS CVE-2020-15721 Fix available 6.1 MediumJuly 14, 2020