RosarioSIS vulnerabilities
4 known CVE vulnerabilities in RosarioSIS, translated and rated.
- CVE-2026-19786Medium
A vulnerability was found in francoisjacquet RosarioSIS up to version 12.8 in the file Modules.php. Performing a manipulation results in cross-site request forgery. Remote exploitation is possible. Upgrading to version 12.9 addresses the issue.
- CVE-2026-19785Medium
A vulnerability was found in RosarioSIS up to version 12.7.4, in the student medical module. Manipulation of the 'table' argument in Medical.inc.php leads to SQL injection. The attack can be launched remotely.
- CVE-2026-19784Medium
A flaw was found in RosarioSIS up to version 12.8, affecting the DBUpdate function in Discipline/Referrals.php. This manipulation causes an authorization bypass. The attack can be initiated remotely, and the exploit has been published.
- CVE-2021-45416Medium
A reflected XSS vulnerability in RosarioSIS 8.2.1 allows attackers to inject arbitrary HTML via the search_term parameter in the modules/Scheduling/Courses.php script.