Lucene search
+L

7 matches found

VulnCheck KEV
VulnCheck KEV
•added 2024/09/18 12:00 a.m.•6 views

VulnCheck KEV: CVE-2021-44427

An unauthenticated SQL Injection vulnerability in Rosario Student Information System aka rosariosis before 8.1.1 allows remote attackers to execute PostgreSQL statements e.g., SELECT, INSERT, UPDATE, and DELETE through /Side.php via the syear parameter...

9.8CVSS8.4AI score0.50641EPSS
SaveIn wildExploits1References471
OSV
OSV
•added 2021/12/02 5:48 p.m.•62 views

GHSA-WF5P-F5XR-C4JJ SQL Injection in rosariosis

An unauthenticated SQL Injection vulnerability in Rosario Student Information System aka rosariosis before 8.1.1 allows remote attackers to execute PostgreSQL statements e.g., SELECT, INSERT, UPDATE, and DELETE through /Side.php via the syear parameter...

9.8CVSS9.9AI score0.50641EPSS
SaveExploits1References6
attackerkb
attackerkb
•added 2021/11/29 10:15 p.m.•10 views

CVE-2021-44427

An unauthenticated SQL Injection vulnerability in Rosario Student Information System aka rosariosis before 8.1.1 allows remote attackers to execute PostgreSQL statements e.g., SELECT, INSERT, UPDATE, and DELETE through /Side.php via the syear parameter...

9.8CVSS7.5AI score0.50641EPSS
SaveExploits1References3
OSV
OSV
•added 2021/11/29 10:15 p.m.•27 views

CVE-2021-44427

An unauthenticated SQL Injection vulnerability in Rosario Student Information System aka rosariosis before 8.1.1 allows remote attackers to execute PostgreSQL statements e.g., SELECT, INSERT, UPDATE, and DELETE through /Side.php via the syear parameter...

9.8CVSS8.4AI score
SaveExploits0References1
Prion
Prion
•added 2021/11/29 10:15 p.m.•25 views

Sql injection

An unauthenticated SQL Injection vulnerability in Rosario Student Information System aka rosariosis before 8.1.1 allows remote attackers to execute PostgreSQL statements e.g., SELECT, INSERT, UPDATE, and DELETE through /Side.php via the syear parameter...

7.5CVSS9.9AI score0.50641EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2021/11/29 12:00 a.m.•16 views

Rosario Student Information System SQL注入漏洞

The Rosario Student Information System is a free student information system used for school administration, and a SQL injection vulnerability exists in the Rosario Student Information System, which can be exploited to execute Postgre SQL statements via the /Side.php parameter via the syear...

9.8CVSS6AI score0.50641EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/29 12:00 a.m.•2 views

CVE-2021-44427: Improper Neutralization of Special Elements used in an SQL Command

An unauthenticated SQL Injection vulnerability in Rosario Student Information System aka rosariosis before 8.1.1 allows remote attackers to execute PostgreSQL statements e.g., SELECT, INSERT, UPDATE, and DELETE through /Side.php via the syear parameter...

9.8CVSS6.2AI score0.50641EPSS
SaveExploits1References2
Rows per page
Query Builder