CVE ID :CVE-2026-121731 Published : Nov. 3, 2026, 10:55 p.m. | 9 minutes ago Description :RosarioSIS before 12.9 contains a sql injection vulnerability that allows authenticated non-student users, including parents, to inject SQL via the unquoted period_id parameter in StudentSummary.php....

#Sicherheitslücke #Apple

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-121731 - RosarioSIS before 12.9 SQL Injection via period_id in Attendance Absence Report

VERWANDTEARTIKEL

CVE-2026-92194 - Quest Foglight for Databases loadManageServerLicense Directory Traversal Remote Code Execution Vulnerability

CVE-2026-92197 - Quest Foglight for Databases unzipFile Directory Traversal Remote Code Execution Vulnerability

CVE-2026-92198 - Quest Foglight for Databases getSource XML External Entity Processing Information Disclosure Vulnerability

CVE-2026-92188 - Quest Foglight for Databases ForgeMBeanServerSupport Missing Authentication Remote Code Execution Vulnerability

CVE-2026-92189 - Quest Foglight for Databases writeTopologySectionToFile External Control of File Path Remote Code Execution Vulnerability

CVE-2026-92190 - Quest Foglight for Databases baseRmiServiceExporter Deserialization of Untrusted Data Remote Code Execution Vulnerability