mirror of
https://github.com/0xMarcio/cve.git
synced 2025-05-07 11:06:19 +00:00
762 B
762 B
CVE-2020-15717
Description
RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-supplied input by the Search.inc.php script. A remote attacker could exploit this vulnerability using the advanced parameter in a crafted URL.
POC
Reference
- https://gitlab.com/francoisjacquet/rosariosis/-/issues/291
- https://gitlab.com/francoisjacquet/rosariosis/-/issues/291
Github
No PoCs found on GitHub currently.