Lucene search
+L

193 matches found

Nuclei
Nuclei
added yesterday41 views

RosarioSIS 6.7.2 - Cross-Site Scripting

RosarioSIS version 6.7.2 and earlier contains a reflected cross-site scripting XSS vulnerability in the Preferences module. The 'tab' parameter in Modules.php is not properly sanitized, allowing an attacker to inject arbitrary JavaScript code via a crafted URL. id: CVE-2020-15718 info: name:...

6.1CVSS6.3AI score0.06325EPSS
SaveExploits2
Nuclei
Nuclei
added yesterday56 views

Rosario Student Information System Unauthenticated SQL Injection

An unauthenticated SQL injection vulnerability in Rosario Student Information System aka rosariosis 8.1 and below allow remote attackers to execute PostgreSQL statements e.g., SELECT, INSERT, UPDATE, and DELETE through /Side.php via the syear parameter. id: CVE-2021-44427 info: name: Rosario...

9.8CVSS8.1AI score0.50641EPSS
SaveExploits1References5
Packet Storm
Packet Storm
added 2025/12/03 12:0 a.m.158 views

📄 RosarioSIS 6.7.2 Cross Site Scripting

RosarioSIS version 6.7.2 suffers from multiple cross site scripting vulnerabilities. Exploit Title: RosarioSIS 6.7.2 - Cross-Site Scripting XSS Date: 2025-11-25 Exploit Author: CodeSecLab Vendor Homepage: https://gitlab.com/francoisjacquet/rosariosis Software Link:...

6.1CVSS6.7AI score0.06325EPSS
SaveExploits3
Exploit DB
Exploit DB
added 2025/12/03 12:0 a.m.181 views

RosarioSIS 6.7.2 - Cross Site Scripting (XSS)

Exploit Title: RosarioSIS 6.7.2 - Cross Site Scripting XSS Date: 2025-11-25 Exploit Author: CodeSecLab Vendor Homepage: https://gitlab.com/francoisjacquet/rosariosis Software Link: https://gitlab.com/francoisjacquet/rosariosis Version: 6.7.2 Tested on: Windows CVE : CVE-2020-15716 Proof Of Concep...

6.1CVSS6.2AI score0.05557EPSS
SaveExploits2
Exploit DB
Exploit DB
added 2025/12/03 12:0 a.m.179 views

RosarioSIS 6.7.2 - Cross-Site Scripting (XSS)

Exploit Title: RosarioSIS 6.7.2 - Cross-Site Scripting XSS Date: 2025-11-25 Exploit Author: CodeSecLab Vendor Homepage: https://gitlab.com/francoisjacquet/rosariosis Software Link: https://gitlab.com/francoisjacquet/rosariosis Version: 6.7.2 Tested on: Windows CVE : CVE-2020-15718 Proof Of Concep...

6.1CVSS6.2AI score0.06325EPSS
SaveExploits2
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2021-0935

Malware in sbrugna...

6.1CVSS6.2AI score0.0143EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2020-7703

Malware in sbrugna...

6.1CVSS6.3AI score0.01511EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2020-7704

Malware in sbrugna...

6.1CVSS6.3AI score0.06325EPSS
SaveExploits2References8
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2022-0872

Malicious code in bioql PyPI...

6.1CVSS6.4AI score0.01467EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2022-0780

Malicious code in bioql PyPI...

5.4CVSS5.8AI score0.00712EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2022-0900

Malicious code in bioql PyPI...

9.8CVSS9AI score0.23084EPSS
SaveExploits3References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.8 views

EUVD-2023-1530

Malicious code in bioql PyPI...

5.4CVSS5.5AI score0.02166EPSS
SaveExploits3References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2024-1287

Malicious code in bioql PyPI...

4CVSS4.7AI score0.0047EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.12 views

EUVD-2022-6176

Malicious code in bioql PyPI...

8.8CVSS7AI score0.00657EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.9 views

EUVD-2022-0803

Malicious code in bioql PyPI...

5.4CVSS5.6AI score0.0073EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2025/05/23 9:24 a.m.7 views

CVE-2024-3138

DISPUTED A vulnerability was found in francoisjacquet RosarioSIS 11.5.1. It has been rated as problematic. This issue affects some unknown processing of the component Add Portal Note. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been...

4CVSS5.7AI score0.0047EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 3:41 a.m.10 views

CVE-2023-29918

RosarioSIS 10.8.4 is vulnerable to CSV injection via the Periods Module...

5.4CVSS7AI score0.02166EPSS
SaveExploits3References1
RedhatCVE
RedhatCVE
added 2025/05/23 3:29 a.m.7 views

CVE-2023-2665

Storage of Sensitive Data in a Mechanism without Access Control in GitHub repository francoisjacquet/rosariosis prior to 11.0...

7.5CVSS6.7AI score0.00613EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 2:57 a.m.4 views

CVE-2023-0994

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository francoisjacquet/rosariosis prior to 10.8.2...

8.1CVSS6.7AI score0.01035EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 1:52 a.m.4 views

CVE-2023-2202

Improper Access Control in GitHub repository francoisjacquet/rosariosis prior to 10.9.3...

6.5CVSS6.8AI score0.00538EPSS
SaveExploits0References1
Rows per page
Query Builder