VulnCheck KEV: CVE-2021-44427

An unauthenticated SQL Injection vulnerability in Rosario Student Information System aka rosariosis before 8.1.1 allows remote attackers to execute PostgreSQL statements e.g., SELECT, INSERT, UPDATE, and DELETE through /Side.php via the syear parameter...

CVE-2021-44427

creationtimestamp| type| source ---|---|--- 2021-11-30 00:33:35+00:00| seen| https://t.me/cibsecurity/33073 2024-01-15 12:15:47+00:00| seen| https://t.me/arpsyndicate/2782 2024-11-22 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-11-22 2024-12-24 00:00:00+00:00| see...

CVE-2021-44427

An unauthenticated SQL Injection vulnerability in Rosario Student Information System aka rosariosis before 8.1.1 allows remote attackers to execute PostgreSQL statements e.g., SELECT, INSERT, UPDATE, and DELETE through /Side.php via the syear parameter...

CVE-2021-44427

CVE-2021-44427 is an unauthenticated SQL injection in Rosario Student Information System (rosariosis) before 8.1.1. The vulnerability allows remote attackers to execute PostgreSQL statements (e.g., SELECT, INSERT, UPDATE, DELETE) via the /Side.php endpoint using the syear parameter. Affected soft...