francoisjacquet
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| francoisjacquet/rosariosis | 8 | – | May 12, 2023 |
| RosarioSIS | 8 | – | Nov 3, 2026 |
Exploited and recent CVEs
- CVE-2026-121732 RosarioSIS before 12.9 Improper Authorization via Student Billing Mass Assignment 0.2%
- CVE-2026-121731 RosarioSIS before 12.9 SQL Injection via period_id in Attendance Absence Report 0.3%
- CVE-2026-116217 RosarioSIS before 12.9.2 Reflected XSS via menu_id in MenuReports.php 0.3%
- CVE-2026-116010 RosarioSIS before 12.9.1 Missing Authorization in Teacher Save Handlers 0.2%
- CVE-2026-19786 francoisjacquet RosarioSIS Modules.php cross-site request forgery 0.2%
- CVE-2026-19785 francoisjacquet RosarioSIS Student Medical Medical.inc.php sql injection 0.3%
- CVE-2026-19784 francoisjacquet RosarioSIS Referrals.php DBUpdate authorization 0.5%
- CVE-2024-3138 francoisjacquet RosarioSIS Add Portal Note cross site scripting 0.5%
- CVE-2023-2665 Storage of Sensitive Data in a Mechanism without Access Control in francoisjacquet/rosariosis 0.6%
- CVE-2023-2202 Improper Access Control in francoisjacquet/rosariosis 0.5%
- CVE-2023-0994 Exposure of Sensitive Information to an Unauthorized Actor in francoisjacquet/rosariosis 1.0%
- CVE-2022-2714 Improper Handling of Length Parameter Inconsistency in francoisjacquet/rosariosis 0.9%
- CVE-2022-3072 Cross-site Scripting (XSS) - Stored in francoisjacquet/rosariosis 0.9%
- CVE-2022-2067 SQL Injection in francoisjacquet/rosariosis 1.9%
- CVE-2022-2036 Cross-site Scripting (XSS) - Stored in francoisjacquet/rosariosis 0.9%
- CVE-2022-1997 Cross-site Scripting (XSS) - Stored in francoisjacquet/rosariosis 0.7%