CVE-2021-44427

9.8 criticalEPSS 51%

Critical (9.8) in rosariosis rosariosis. EPSS 51% chance of exploitation in the next 30 days.

An unauthenticated SQL Injection vulnerability in Rosario Student Information System (aka rosariosis) before 8.1.1 allows remote attackers to execute PostgreSQL statements (e.g., SELECT, INSERT, UPDATE, and DELETE) through /Side.php via the syear parameter.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 51% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2021-11-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

rosariosis:rosariosis

References

https://gitlab.com/francoisjacquet/rosariosis/-/issues/328
https://gitlab.com/francoisjacquet/rosariosis/-/issues/328

Check your stack JSON