CVE-2021-44567

2022-02-2415:15:24

Google

osv.dev

8.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

49.2%

JSON

An unauthenticated SQL Injection vulnerability exists in RosarioSIS before 7.6.1 via the votes parameter in ProgramFunctions/PortalPollsNotes.fnc.php.

CPENameOperatorVersion
rosariosiseq6.8
rosariosiseq2.1.1
rosariosiseq5.0-beta4
rosariosiseq2.8.1
rosariosiseq5.4.1
rosariosiseq5.6.4
rosariosiseq2.8.8
rosariosiseq5.7.2
rosariosiseq2.8.12
rosariosiseq2.8.25

Name	Operator	Version
rosariosis	eq	6.8
rosariosis	eq	2.1.1
rosariosis	eq	5.0-beta4
rosariosis	eq	2.8.1
rosariosis	eq	5.4.1
rosariosis	eq	5.6.4
rosariosis	eq	2.8.8
rosariosis	eq	5.7.2
rosariosis	eq	2.8.12
rosariosis	eq	2.8.25