CVE-2021-44427

PoC —

CVSS 3.1

9.8 critical

EPSS

51%p99

Published

Nov 29, 2021 (Nov 29, 2021)

Modified

Jun 17, 2026

Description

An unauthenticated SQL Injection vulnerability in Rosario Student Information System (aka rosariosis) before 8.1.1 allows remote attackers to execute PostgreSQL statements (e.g., SELECT, INSERT, UPDATE, and DELETE) through /Side.php via the syear parameter.

Vendors: rosariosis
Products: rosariosis
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (50.6%)

In the news0 stories

No ingested article mentions this CVE yet.