francoisjacquet

Products

ProductCVEsExploitedLatest
francoisjacquet/rosariosis8–May 12, 2023
RosarioSIS8–Nov 3, 2026

Exploited and recent CVEs

  • CVE-2026-121732 Low 2.7 RosarioSIS before 12.9 Improper Authorization via Student Billing Mass Assignment 0.2%
  • CVE-2026-121731 High 8.8 RosarioSIS before 12.9 SQL Injection via period_id in Attendance Absence Report 0.3%
  • CVE-2026-116217 Medium 6.1 RosarioSIS before 12.9.2 Reflected XSS via menu_id in MenuReports.php 0.3%
  • CVE-2026-116010 Medium 4.3 RosarioSIS before 12.9.1 Missing Authorization in Teacher Save Handlers 0.2%
  • CVE-2026-19786 Medium 4.3 francoisjacquet RosarioSIS Modules.php cross-site request forgery 0.2%
  • CVE-2026-19785 Medium 6.3 francoisjacquet RosarioSIS Student Medical Medical.inc.php sql injection 0.3%
  • CVE-2026-19784 Medium 4.3 francoisjacquet RosarioSIS Referrals.php DBUpdate authorization 0.5%
  • CVE-2024-3138 Low 3.5 francoisjacquet RosarioSIS Add Portal Note cross site scripting 0.5%
  • CVE-2023-2665 High 7.5 Storage of Sensitive Data in a Mechanism without Access Control in francoisjacquet/rosariosis 0.6%
  • CVE-2023-2202 Medium 4.6 Improper Access Control in francoisjacquet/rosariosis 0.5%
  • CVE-2023-0994 High 8.1 Exposure of Sensitive Information to an Unauthorized Actor in francoisjacquet/rosariosis 1.0%
  • CVE-2022-2714 High 8.1 Improper Handling of Length Parameter Inconsistency in francoisjacquet/rosariosis 0.9%
  • CVE-2022-3072 High 8.0 Cross-site Scripting (XSS) - Stored in francoisjacquet/rosariosis 0.9%
  • CVE-2022-2067 High 8.8 SQL Injection in francoisjacquet/rosariosis 1.9%
  • CVE-2022-2036 Critical 9.0 Cross-site Scripting (XSS) - Stored in francoisjacquet/rosariosis 0.9%
  • CVE-2022-1997 High 8.8 Cross-site Scripting (XSS) - Stored in francoisjacquet/rosariosis 0.7%