~ / search / GHSA-82rr-mq4r-p4r3

GHSA-82rr-mq4r-p4r3

SQL injection in francoisjacquet/rosariosis

Source: GitHub Advisory Database (reviewed) Critical CVE-2021-44567

Packages

EcosystemPackageAffectedFixed in
Packagist francoisjacquet/rosariosis < 7.6.1 7.6.1

Details

As written in the advisory (Markdown source, shown as plain text).

An SQL Injection vulnerability exits in RosarioSIS before 7.6.1 via the votes parameter in ProgramFunctions/PortalPollsNotes.fnc.php.

References

External links from the advisory. They lead to third-party sites.