RosarioSIS vulnerabilities

1 known vulnerability in RosarioSIS from Francoisjacquet. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  RosarioSIS: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-121731Nov 3, 2026Francoisjacquet

  RosarioSIS before 12.9 contains a sql injection vulnerability that allows authenticated non-student users, including parents, to inject SQL via the unquoted period_id parameter in StudentSummary.php. Attackers can supply payloads without single quotes into IN(