CVE-2020-15718

Published: Jul 15, 2020

Modified: Apr 16, 2025

PUBLISHED

Description

RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-supplied input by the PrintSchedules.php script. A remote attacker could exploit this vulnerability using the include_inactive parameter in a crafted URL.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://gitlab.com/francoisjacquet/rosariosis/-/blob/mobile/CHANGES.md

https://gitlab.com/francoisjacquet/rosariosis/-/issues/291

https://gitlab.com/francoisjacquet/rosariosis/-/tags/v6.8-beta

https://exchange.xforce.ibmcloud.com/vulnerabilities/184944

https://gitlab.com/francoisjacquet/rosariosis/-/commit/89ae9de732024e3a2e99262aa98b400a1aa6975a

https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2020-15718.md

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2020-15718

Description

Affected Products

References