Login Request a demo
FR
Vendor
francoisjacquet
2 products with CVEs on record
25
CVEs
0
On KEV
0
New 30D
Products
RO
RosarioSIS
francoisjacquet
9.8
24 CVEs0 on KEV0 new
SI
Student Information System
Rosariosis
6.1
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-93014
RO
RosarioSIS
RosarioSIS
7.1
1%
Sep 17RosarioSIS before 12.9 Path Traversal in File Deletion via filename Parameter
CVE-2026-19786
RO
RosarioSIS
francoisjacquet
4.3
0%
Aug 14francoisjacquet RosarioSIS Modules.php cross-site request forgery
CVE-2026-19785
RO
RosarioSIS
francoisjacquet
6.3
0%
Aug 14francoisjacquet RosarioSIS Student Medical Medical.inc.php sql injection
CVE-2026-19784
RO
RosarioSIS
francoisjacquet
4.3
0%
Aug 14francoisjacquet RosarioSIS Referrals.php DBUpdate authorization
CVE-2024-3138
RO
Rosariosis
Rosariosis
3.5
0%
Apr 1francoisjacquet RosarioSIS Add Portal Note cross site scripting
CVE-2023-2665
RO
Rosariosis
Rosariosis
7.5
1%
May 12Storage of Sensitive Data in a Mechanism without Access Control in francoisjacquet/rosariosis
CVE-2023-29918
RO
Rosariosis
Rosariosis
5.4
2%
May 2RosarioSIS 10.8.4 is vulnerable to CSV injection via the Periods Module
CVE-2023-2202
RO
Rosariosis
Rosariosis
6.5
1%
Apr 21Improper Access Control in francoisjacquet/rosariosis
CVE-2023-0994
RO
Rosariosis
Rosariosis
7.5
1%
Feb 24Exposure of Sensitive Information to an Unauthorized Actor in francoisjacquet/rosariosis
CVE-2022-2714
RO
Rosariosis
Rosariosis
9.8
1%
Sep 6Improper Handling of Length Parameter Inconsistency in francoisjacquet/rosariosis
CVE-2022-3072
RO
Rosariosis
Rosariosis
5.4
1%
Sep 1Cross-site Scripting (XSS) - Stored in francoisjacquet/rosariosis
CVE-2022-2067
RO
Rosariosis
Rosariosis
9.1
2%
Jun 13SQL Injection in francoisjacquet/rosariosis
CVE-2022-2036
RO
Rosariosis
Rosariosis
5.4
1%
Jun 9Cross-site Scripting (XSS) - Stored in francoisjacquet/rosariosis
CVE-2022-1997
RO
Rosariosis
Rosariosis
5.4
1%
Jun 6Cross-site Scripting (XSS) - Stored in francoisjacquet/rosariosis
CVE-2021-44567
RO
Rosariosis
Rosariosis
9.8
23%
Feb 22An unauthenticated SQL Injection vulnerability exists in RosarioSIS before 7.6.1 via the votes parameter in ProgramFunctions/PortalPollsNotes.fnc.php
CVE-2021-44566
RO
Rosariosis
Rosariosis
5.4
1%
Feb 22A Cross Site Scripting (XSS) vulnerability exists in RosarioSIS before 4.3 via the SanitizeMarkDown function in ProgramFunctions/MarkDownHTML.fnc.php
CVE-2021-44565
RO
Rosariosis
Rosariosis
5.4
1%
Feb 22A Cross Site Scripting (XSS) vulnerability exists in RosarioSIS before 7.6.1 via the xss_clean function in classes/Security.php, which allows remote malicious users to inject…
CVE-2021-45416
RO
Rosariosis
Rosariosis
6.1
2%
Feb 1Reflected Cross-site scripting (XSS) vulnerability in RosarioSIS 8.2.1 allows attackers to inject arbitrary HTML via the search_term parameter in the…
CVE-2021-44427
RO
Rosariosis
Rosariosis
9.8
51%
Nov 29An unauthenticated SQL Injection vulnerability in Rosario Student Information System (aka rosariosis) before 8.1.1 allows remote attackers to execute PostgreSQL statements (e.g.,…
CVE-2020-13278
RO
RosarioSIS
RosarioSIS
6.1
1%
Aug 12Reflected Cross-Site Scripting vulnerability in Modules.php in RosarioSIS Student Information System < 6.5.1 allows remote attackers to execute arbitrary web script via embedding…
CVE-2020-15718
RO
Rosariosis
Rosariosis
6.1
6%
Jul 15RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-supplied input by the PrintSchedules.php script
CVE-2020-15717
RO
Rosariosis
Rosariosis
6.1
2%
Jul 15RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-supplied input by the Search.inc.php script
CVE-2020-15716
RO
Rosariosis
Rosariosis
6.1
6%
Jul 15RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-supplied input by the Preferences.php script
CVE-2020-15721
RO
Rosariosis
Rosariosis
6.1
1%
Jul 14RosarioSIS through 6.8-beta allows modules/Custom/NotifyParents.php XSS because of the href attributes for AddStudents.php and User.php