RosarioSIS 6.7.2
Approved changes feed: RSS · Atom
cpe:2.3:a:rosariosis:rosariosis:6.7.2:*:*:*:*:*:*:*
part: a version: 6.7.2 update: *
| Vendor | Rosariosis (83ac7bc8-8ab3-57e5-b0d6-e458cf6cbf71) |
|---|---|
| Product | Rosariosis (7fd1265a-91a0-5c55-9c2b-77a889573650) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:docker/rosariosis/rosariosis |
purl2cpe | 2026-06-01 10:16:32.409116 |
pkg:github/francoisjacquet/rosariosis |
purl2cpe | 2026-06-01 10:16:32.409117 |
pkg:gitlab/francoisjacquet/rosariosis |
purl2cpe | 2026-06-01 10:16:32.409119 |
pkg:sourceforge/rosariosis |
purl2cpe | 2026-06-01 10:16:32.409120 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-15718 |
vulnerable | 2026-06-08 05:19:26.508635 |
Details available
RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-supplied input by the PrintSchedules.php script. A remote attacker could exploit this vulnerability using the include_inactive parameter in a crafted URL.
Published: 2020-07-15T19:02:52.000Z
Updated: 2025-04-16T14:28:25.363Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15717 |
vulnerable | 2026-06-08 05:19:26.508145 |
Details available
RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-supplied input by the Search.inc.php script. A remote attacker could exploit this vulnerability using the advanced parameter in a crafted URL.
Published: 2020-07-15T19:01:43.000Z
Updated: 2024-08-04T13:22:30.760Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15716 |
vulnerable | 2026-06-08 05:19:26.507563 |
Details available
RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-supplied input by the Preferences.php script. A remote attacker could exploit this vulnerability using the tab parameter in a crafted URL.
Published: 2020-07-15T19:00:44.000Z
Updated: 2025-04-16T14:31:56.472Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.