{"cvss":9.8,"datePublished":"2024-09-18T00:00:00Z","dateUpdated":"2024-09-18T00:00:00Z","description":"An unauthenticated SQL Injection vulnerability in Rosario Student Information System (aka rosariosis) before 8.1.1 allows remote attackers to execute PostgreSQL statements (e.g., SELECT, INSERT, UPDATE, and DELETE) through /Side.php via the syear parameter.","dueDate":"","id":"CVE-2021-44427","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"rosariosis","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"CRITICAL","source":"vulncheck_kev","title":"rosariosis rosariosis Improper Neutralization of Special Elements used in an SQL Command","vendor":"rosariosis"}