medium5.4Public exploit code
CVE-2023-29918
RosarioSIS vulnerable to CSV Injection
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- RosarioSIS 10.8.4 - CSV Injection2023-07-28 · webapps · php · Verified
Impact
RosarioSIS 10.8.4 is vulnerable to CSV injection via the Periods Module.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | francoisjacquet/rosariosis | <= 10.8.4 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rosariosis | Rosariosis | Version 10.8.4 |