RosarioSIS Cross-Site Scripting Vulnerability

RosarioSIS is a student information system for school management. A cross-site scripting vulnerability exists in RosarioSIS 6.7.2. The vulnerability stems from improper validation of user-supplied input in the PrintSchedules.php script. A remote attacker can exploit the vulnerability by using the...

PT-2020-14605

Name of the Vulnerable Software and Affected Versions RosarioSIS version 6.7.2 Description The issue is caused by improper validation of user-supplied input by the PrintSchedules.php script, allowing a remote attacker to exploit it using the include inactive parameter in a crafted URL...