What’s Vulnerable › Vulnerabilities

CVE-2021-44567

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 23.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-02-24 · updated 2026-06-17
• Weakness: CWE-89

Description

An unauthenticated SQL Injection vulnerability exists in RosarioSIS before 7.6.1 via the votes parameter in ProgramFunctions/PortalPollsNotes.fnc.php.

Affected products

• francoisjacquet/rosariosis: before 7.6.1 — fixed in 7.6.1

How to fix

Upgrade to a fixed version: francoisjacquet/rosariosis 7.6.1. Check the vendor advisory for mitigations.

References

• https://gitlab.com/francoisjacquet/rosariosis/-/blob/mobile/CHANGES.md#changes-in-761
• https://gitlab.com/francoisjacquet/rosariosis/-/commit/519af055a4fdc1362657d75bca76f9c95a081eaa
• https://gitlab.com/francoisjacquet/rosariosis/-/commit/e001430aa9fb53d2502fb6f036f6c51c578d2016
• https://gitlab.com/francoisjacquet/rosariosis/-/issues/308
• https://gitlab.com/francoisjacquet/rosariosis/-/blob/mobile/CHANGES.md#changes-in-761
• https://gitlab.com/francoisjacquet/rosariosis/-/commit/519af055a4fdc1362657d75bca76f9c95a081eaa
• https://gitlab.com/francoisjacquet/rosariosis/-/commit/e001430aa9fb53d2502fb6f036f6c51c578d2016
• https://gitlab.com/francoisjacquet/rosariosis/-/issues/308

Get alerted when CVE-2021-44567 or the next vulnerability affects your stack