Em resumo
- CVE-2021-44427 é uma vulnerabilidade CRÍTICO (CVSS 9.8) que afeta francoisjacquet/rosariosis, rosariosis (rosariosis).
- Chance de exploração nos próximos 30 dias (EPSS): 50.6%, maior que 98.9% das vulnerabilidades.
- Correção: atualize para 8.1.1 ou posterior.
Description
An unauthenticated SQL Injection vulnerability in Rosario Student Information System (aka rosariosis) before 8.1.1 allows remote attackers to execute PostgreSQL statements (e.g., SELECT, INSERT, UPDATE, and DELETE) through /Side.php via the syear parameter.
NVD description
An unauthenticated SQL Injection vulnerability in Rosario Student Information System (aka rosariosis) before 8.1.1 allows remote attackers to execute PostgreSQL statements (e.g., SELECT, INSERT, UPDATE, and DELETE) through /Side.php via the syear parameter.
Mais vulnerabilidades de francoisjacquet/rosariosis
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free