Lucene search
+L

10 matches found

VulnCheck KEV
VulnCheck KEV
•added 2024/09/18 12:00 a.m.•6 views

VulnCheck KEV: CVE-2021-44427

An unauthenticated SQL Injection vulnerability in Rosario Student Information System aka rosariosis before 8.1.1 allows remote attackers to execute PostgreSQL statements e.g., SELECT, INSERT, UPDATE, and DELETE through /Side.php via the syear parameter...

9.8CVSS8.4AI score0.50641EPSS
SaveIn wildExploits1References473
OSV
OSV
•added 2021/12/02 5:48 p.m.•62 views

GHSA-WF5P-F5XR-C4JJ SQL Injection in rosariosis

An unauthenticated SQL Injection vulnerability in Rosario Student Information System aka rosariosis before 8.1.1 allows remote attackers to execute PostgreSQL statements e.g., SELECT, INSERT, UPDATE, and DELETE through /Side.php via the syear parameter...

9.8CVSS9.9AI score0.50641EPSS
SaveExploits1References6
Github Security Blog
Github Security Blog
•added 2021/12/02 5:48 p.m.•42 views

SQL Injection in rosariosis

An unauthenticated SQL Injection vulnerability in Rosario Student Information System aka rosariosis before 8.1.1 allows remote attackers to execute PostgreSQL statements e.g., SELECT, INSERT, UPDATE, and DELETE through /Side.php via the syear parameter...

9.8CVSS7.1AI score0.50641EPSS
SaveExploits1References6Affected Software1
CNVD
CNVD
•added 2021/12/01 12:00 a.m.•108 views

Rosario Student Information System SQL Injection Vulnerability

The Rosario Student Information System is a free student information system used for school administration, and a SQL injection vulnerability exists in the Rosario Student Information System, which can be exploited to execute Postgre SQL statements via the /Side.php parameter via the syear...

9.8CVSS3.5AI score0.50641EPSS
SaveExploits1References1
OSV
OSV
•added 2021/11/29 10:15 p.m.•27 views

CVE-2021-44427

An unauthenticated SQL Injection vulnerability in Rosario Student Information System aka rosariosis before 8.1.1 allows remote attackers to execute PostgreSQL statements e.g., SELECT, INSERT, UPDATE, and DELETE through /Side.php via the syear parameter...

9.8CVSS8.4AI score
SaveExploits0References1
attackerkb
attackerkb
•added 2021/11/29 10:15 p.m.•10 views

CVE-2021-44427

An unauthenticated SQL Injection vulnerability in Rosario Student Information System aka rosariosis before 8.1.1 allows remote attackers to execute PostgreSQL statements e.g., SELECT, INSERT, UPDATE, and DELETE through /Side.php via the syear parameter...

9.8CVSS7.5AI score0.50641EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2021/11/29 12:00 a.m.•16 views

Rosario Student Information System SQL注入漏洞

The Rosario Student Information System is a free student information system used for school administration, and a SQL injection vulnerability exists in the Rosario Student Information System, which can be exploited to execute Postgre SQL statements via the /Side.php parameter via the syear...

9.8CVSS6AI score0.50641EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/29 12:00 a.m.•2 views

CVE-2021-44427: Improper Neutralization of Special Elements used in an SQL Command

An unauthenticated SQL Injection vulnerability in Rosario Student Information System aka rosariosis before 8.1.1 allows remote attackers to execute PostgreSQL statements e.g., SELECT, INSERT, UPDATE, and DELETE through /Side.php via the syear parameter...

9.8CVSS6.2AI score0.50641EPSS
SaveExploits1References2
NVD
NVD
•added 2017/09/11 9:29 a.m.•28 views

CVE-2017-14252

SQL Injection exists in the EyesOfNetwork web interface aka eonweb 5.1-0 via the groupid cookie to side.php...

9.8CVSS9.9AI score0.01454EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/09/11 12:00 a.m.•4 views

CVE-2017-14252: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in the EyesOfNetwork web interface aka eonweb 5.1-0 via the groupid cookie to side.php...

9.8CVSS5.8AI score0.01454EPSS
SaveExploits1References2
Rows per page
Query Builder