All 6 CVE vulnerabilities found in RosarioSIS, with AI-generated Chinese analysis, references, and POCs.
Vendor: RosarioSIS
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-93014 | RosarioSIS before 12.9 Path Traversal in File Deletion via filename Parameter CWE-22 | 7.1 | High | 2026-09-17 |
| CVE-2026-19786 | francoisjacquet RosarioSIS Modules.php cross-site request forgery CWE-352 | 4.3 | Medium | 2026-08-14 |
| CVE-2026-19785 | francoisjacquet RosarioSIS Student Medical Medical.inc.php sql injection CWE-89 | 6.3 | Medium | 2026-08-14 |
| CVE-2026-19784 | francoisjacquet RosarioSIS Referrals.php DBUpdate authorization CWE-639 | 4.3 | Medium | 2026-08-14 |
| CVE-2024-3138 | francoisjacquet RosarioSIS Add Portal Note cross site scripting CWE-79 | 3.5 | Low | 2024-04-01 |
| CVE-2020-13278 | RosarioSIS Student Information System 跨站脚本漏洞 | 6.1 | Medium | 2020-08-12 |
All 6 known CVE vulnerabilities affecting RosarioSIS with full Chinese analysis, references, and POCs where available.