← Database

CVE-2021-44567

CRITICAL CVSS: 9.8 Published: 2022-02-24 Modified: 2026-06-17

Description

An unauthenticated SQL Injection vulnerability exists in RosarioSIS before 7.6.1 via the votes parameter in ProgramFunctions/PortalPollsNotes.fnc.php.

Affected Platforms

Rosariosis Rosariosis

Weakness Type

CWE-89

References