Lucene search
K

7 matches found

VulnCheck KEV
VulnCheck KEV
added 2024/09/18 12:0 a.m.2 views

VulnCheck KEV: CVE-2021-44427

An unauthenticated SQL Injection vulnerability in Rosario Student Information System aka rosariosis before 8.1.1 allows remote attackers to execute PostgreSQL statements e.g., SELECT, INSERT, UPDATE, and DELETE through /Side.php via the syear parameter...

9.8CVSS6.1AI score0.88416EPSS
Exploits1References1
Github Security Blog
Github Security Blog
added 2021/12/02 5:48 p.m.23 views

SQL Injection in rosariosis

An unauthenticated SQL Injection vulnerability in Rosario Student Information System aka rosariosis before 8.1.1 allows remote attackers to execute PostgreSQL statements e.g., SELECT, INSERT, UPDATE, and DELETE through /Side.php via the syear parameter...

9.8CVSS7.1AI score0.88416EPSS
Exploits1References6Affected Software1
OSV
OSV
added 2021/12/02 5:48 p.m.11 views

GHSA-WF5P-F5XR-C4JJ SQL Injection in rosariosis

An unauthenticated SQL Injection vulnerability in Rosario Student Information System aka rosariosis before 8.1.1 allows remote attackers to execute PostgreSQL statements e.g., SELECT, INSERT, UPDATE, and DELETE through /Side.php via the syear parameter...

9.8CVSS9.9AI score0.88416EPSS
Exploits1References6
CNVD
CNVD
added 2021/12/01 12:0 a.m.14 views

Rosario Student Information System SQL Injection Vulnerability

The Rosario Student Information System is a free student information system used for school administration, and a SQL injection vulnerability exists in the Rosario Student Information System, which can be exploited to execute Postgre SQL statements via the /Side.php parameter via the syear...

9.8CVSS3.5AI score0.88416EPSS
Exploits1References1
OSV
OSV
added 2021/11/29 10:15 p.m.12 views

CVE-2021-44427

An unauthenticated SQL Injection vulnerability in Rosario Student Information System aka rosariosis before 8.1.1 allows remote attackers to execute PostgreSQL statements e.g., SELECT, INSERT, UPDATE, and DELETE through /Side.php via the syear parameter...

9.8CVSS8.4AI score
Exploits0References1
CNNVD
CNNVD
added 2021/11/29 12:0 a.m.3 views

Rosario Student Information System SQL注入漏洞

The Rosario Student Information System is a free student information system used for school administration, and a SQL injection vulnerability exists in the Rosario Student Information System, which can be exploited to execute Postgre SQL statements via the /Side.php parameter via the syear...

9.8CVSS6AI score0.88416EPSS
Exploits1References2
NVD
NVD
added 2017/09/11 9:29 a.m.9 views

CVE-2017-14252

SQL Injection exists in the EyesOfNetwork web interface aka eonweb 5.1-0 via the groupid cookie to side.php...

9.8CVSS9.9AI score0.0025EPSS
Exploits1References1
Rows per page
Query Builder