PT-2021-24089 · Postgresql+1 · Postgresql+1

Isaiah James Puzon · Published 2021-11-29 · Updated 2021-12-02 · CVE-2021-44427

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Rosario Student Information System versions prior to 8.1.1

Description: The issue allows remote attackers to execute PostgreSQL statements, such as SELECT, INSERT, UPDATE, and DELETE, through the /Side.php endpoint via the syear parameter. This enables unauthorized access to database operations.

Recommendations: For versions prior to 8.1.1, update to version 8.1.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the /Side.php endpoint to minimize the risk of exploitation. Avoid using the syear parameter in the affected endpoint until the issue is resolved.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2021-44427

GHSA-WF5P-F5XR-C4JJ

Affected Products

Postgresql

Rosariosis Student Information System

References · 10

• 🔥 https://gitlab.com/francoisjacquet/rosariosis/-/issues/328 · Exploit
• https://osv.dev/vulnerability/GHSA-wf5p-f5xr-c4jj · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-44427 · Security Note
• https://osv.dev/vulnerability/CVE-2021-44427 · Vendor Advisory
• https://github.com/francoisjacquet/rosariosis · Note
• https://github.com/francoisjacquet/rosariosis/commit/e001430aa9fb53d2502fb6f036f6c51c578d2016 · Note
• https://t.me/cibsecurity/33073 · Telegram Post
• https://t.me/cvenotify/23962 · Telegram Post
• https://gitlab.com/francoisjacquet/rosariosis/-/commit/e001430aa9fb53d2502fb6f036f6c51c578d2016 · Note
• https://gitlab.com/francoisjacquet/rosariosis/blob/mobile/CHANGES.md#changes-in-811 · Note