12 matches found
EUVD-2023-1530
Malicious code in bioql PyPI...
CVE-2023-29918
RosarioSIS 10.8.4 is vulnerable to CSV injection via the Periods Module...
GHSA-F8HP-GRMR-PP7J RosarioSIS vulnerable to CSV Injection
RosarioSIS 10.8.4 is vulnerable to CSV injection via the Periods Module...
RosarioSIS vulnerable to CSV Injection
RosarioSIS 10.8.4 is vulnerable to CSV injection via the Periods Module...
CVE-2023-29918
RosarioSIS 10.8.4 is vulnerable to CSV injection via the Periods Module...
CVE-2023-29918
RosarioSIS 10.8.4 is vulnerable to CSV injection via the Periods Module...
Input validation
RosarioSIS 10.8.4 is vulnerable to CSV injection via the Periods Module...
CVE-2023-29918
RosarioSIS 10.8.4 is vulnerable to CSV injection via the Periods Module...
PT-2023-22475 · Unknown · Rosariosis
Name of the Vulnerable Software and Affected Versions: RosarioSIS version 10.8.4 Description: The issue concerns a CSV injection vulnerability via the Periods Module. Recommendations: For RosarioSIS version 10.8.4, consider disabling access to the Periods Module until a patch is available. At the...
CVE-2023-29918
CVE-2023-29918 affects RosarioSIS 10.8.4, with a CSV injection vulnerability in the Periods Module. Root cause: CSV injection in a module used for reporting/exports. Impact as per CVSS: Confidentiality and Integrity Low, Availability None; Attack Vector Network, User Interaction Required, Privile...
RosarioSIS 安全漏洞
RosarioSIS is a free and open source student information system. It is used to manage students, create reports and make the right decisions. A security vulnerability exists in RosarioSIS version 10.8.4 that stems from a CSV injection in Periods Module...
CVE-2023-29918
RosarioSIS 10.8.4 is vulnerable to CSV injection via the Periods Module...