Lucene search
Veracode Vulnerability DatabaseVERACODE:33138HistoryNov 30, 2021 - 2:30 p.m.
SQL Injection
2021-11-3014:30:56
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.044 Low
EPSS
Percentile
92.5%
francoisjacquet/rosariosis is vulnerable to SQL Injection vulnerability. The vulnerability exists because the condition in session_start function of Warehouse.php is not properly validated which allows a remote attacker to execute PostgreSQL statements.
| CPE | Name | Operator | Version |
|---|---|---|---|
| francoisjacquet/rosariosis | le | v8.1 | |
| francoisjacquet/rosariosis | le | v8.1 |
Related
cnvd
cnvd
Rosario Student Information System SQL Injection Vulnerability
2021-12-01 00:00:00
nuclei
nuclei
Rosario Student Information System Unauthenticated SQL Injection
2021-11-30 15:56:38
osv
osv
CVE-2021-44427
2021-11-29 22:15:07
SQL Injection in rosariosis
2021-12-02 17:48:53
github
github
SQL Injection in rosariosis
2021-12-02 17:48:53
cve
cve
CVE-2021-44427
2021-11-29 22:15:07
cvelist
cvelist
CVE-2021-44427
2021-11-29 21:34:16
prion
prion
Sql injection
2021-11-29 22:15:00
nvd
nvd
CVE-2021-44427
2021-11-29 22:15:07