Advisories · Technology
francoisjacquet RosarioSIS.
Every CVE that names francoisjacquet RosarioSIS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 2.1 Low
RosarioSIS before 12.9 Improper Authorization via Student Billing Mass Assignment
- francoisjacquet RosarioSIS
- Broken access control
- CVSS 8.7 High
RosarioSIS before 12.9 SQL Injection via period_id in Attendance Absence Report
- francoisjacquet RosarioSIS
- SQL injection
- CVSS 5.3 Medium
RosarioSIS before 12.9.2 Reflected XSS via menu_id in MenuReports.php
- francoisjacquet rosariosis
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
RosarioSIS before 12.9.1 Missing Authorization in Teacher Save Handlers
- francoisjacquet RosarioSIS
- Broken access control
- CVSS 5.3 Medium
francoisjacquet RosarioSIS Modules.php cross-site request forgery
- francoisjacquet RosarioSIS
- Cross-site request forgery (CSRF)
- Broken access control
- CVSS 5.3 Medium
francoisjacquet RosarioSIS Student Medical Medical.inc.php sql injection
- francoisjacquet RosarioSIS
- Other injection
- SQL injection
- CVSS 5.3 Medium
francoisjacquet RosarioSIS Referrals.php DBUpdate authorization
- francoisjacquet RosarioSIS
- Broken access control