SQL Injection in rosariosis

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2021-44427 · ADVISORY
• francoisjacquet/rosariosis commit e001430 · WEB
• francoisjacquet/rosariosis · PACKAGE
• gitlab.com/francoisjacquet/rosariosis/-/commit/e001430aa9fb53d2502fb6f036f6c51c578d2016 · WEB
• gitlab.com/francoisjacquet/rosariosis/-/issues/328 · WEB
• gitlab.com/francoisjacquet/rosariosis/blob/mobile/CHANGES.md · WEB

francoisjacquet/rosariosis のその他の脆弱性

• CVE-2024-3138低 3.5** DISPUTED ** A vulnerability was found in francoisjacquet RosarioSIS 11.5.1. It has been rated as problematic. This issue affects some unk…
• CVE-2023-2665高 7.5Storage of Sensitive Data in a Mechanism without Access Control in GitHub repository francoisjacquet/rosariosis prior to 11.0.
• CVE-2023-29918中 5.4RosarioSIS 10.8.4 is vulnerable to CSV injection via the Periods Module.
• CVE-2023-2202中 6.5Improper Access Control in GitHub repository francoisjacquet/rosariosis prior to 10.9.3.
• CVE-2023-0994高 7.5Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository francoisjacquet/rosariosis prior to 10.8.2.