Threats tagged 'ghsa-97v2-f3v8-3cfx'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.7	CVE-2026-121731RosarioSIS before 12.9 contains a sql injection vulnerability that allows authenticated non-student users, including High8.72026-11-04GCVE DatabaseCVE-2026-121731 RosarioSIS versions prior to 12.9 contain a SQL injection vulnerability in the StudentSummary.php component. This flaw allows authenticated non-student users, such as parents, to inject SQL code via the unquoted period_id parameter. Exploitation can lead to unauthorized extraction of administrator password hashes and student records or modification of data through stacked SQL statements. Report on CVE-2026-121731 Vulnerability CWE-89 #ghsa-97v2-f3v8-3cfx	GCVE Database	2026-11-04

Page 1 of 1