CRITICAL
An unauthenticated SQL Injection vulnerability exists in RosarioSIS before 7.6.1 via the votes parameter in ProgramFunctions/PortalPollsNotes.fnc.php
Published Feb 22, 2022
9.8
CRITICALCVSS 3.1
EPSS 23.08%
Description
An unauthenticated SQL Injection vulnerability exists in RosarioSIS before 7.6.1 via the votes parameter in ProgramFunctions/PortalPollsNotes.fnc.php.
Affected products
No data.
- < 7.6.1
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (7)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-0900 Advisory
- https://github.com/advisories/GHSA-82rr-mq4r-p4r3 Advisory
- https://gitlab.com/francoisjacquet/rosariosis/-/blob/mobile/CHANGES.md#changes-in-761 x_refsource_MISCRelease NotesThird Party Advisory
- https://gitlab.com/francoisjacquet/rosariosis/-/commit/519af055a4fdc1362657d75bca76f9c95a081eaa x_refsource_MISCPatchThird Party Advisory
- https://gitlab.com/francoisjacquet/rosariosis/-/commit/e001430aa9fb53d2502fb6f036f6c51c578d2016 x_refsource_MISCPatchThird Party Advisory
- https://gitlab.com/francoisjacquet/rosariosis/-/issues/308 x_refsource_MISCExploitIssue TrackingPatchThird Party Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2021-44567
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-0900 | Advisory | |
| https://github.com/advisories/GHSA-82rr-mq4r-p4r3 | Advisory | |
| https://gitlab.com/francoisjacquet/rosariosis/-/blob/mobile/CHANGES.md#changes-in-761 | x_refsource_MISCRelease NotesThird Party Advisory | |
| https://gitlab.com/francoisjacquet/rosariosis/-/commit/519af055a4fdc1362657d75bca76f9c95a081eaa | x_refsource_MISCPatchThird Party Advisory | |
| https://gitlab.com/francoisjacquet/rosariosis/-/commit/e001430aa9fb53d2502fb6f036f6c51c578d2016 | x_refsource_MISCPatchThird Party Advisory | |
| https://gitlab.com/francoisjacquet/rosariosis/-/issues/308 | x_refsource_MISCExploitIssue TrackingPatchThird Party Advisory | |
| https://nvd.nist.gov/vuln/detail/CVE-2021-44567 |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Feb 22, 2022
Updated Aug 4, 2024
Reserved Dec 6, 2021
Link CVE-2021-44567
CISA Vulnrichment
No data
Red Hat
No data
GitHub
Link GHSA-82RR-MQ4R-P4R3