CVE-2026-19785

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-19785

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-19785.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-19785

Published

2026-08-14T02:15:10.506Z

Modified

2026-08-16T03:31:16.115497225Z

Severity

5.3 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X CVSS Calculator

Summary

francoisjacquet RosarioSIS Student Medical Medical.inc.php sql injection

Details

A vulnerability has been found in francoisjacquet RosarioSIS up to 12.7.4. This vulnerability affects unknown code of the file modules/Students/includes/Medical.inc.php of the component Student Medical Module. Such manipulation of the argument table leads to sql injection. The attack may be launched remotely. Upgrading to version 12.8 is able to resolve this issue. The name of the patch is 6234a0ee0124c0667c824693ac77164f18946ddf. Upgrading the affected component is recommended.

Database specific

{
    "cwe_ids": [
        "CWE-74",
        "CWE-89"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19785.json",
    "cna_assigner": "VulDB",
    "unresolved_ranges": [
        {
            "source": "AFFECTED_FIELD",
            "extracted_events": [
                {
                    "introduced": "12.7.0"
                },
                {
                    "last_affected": "12.7.0"
                }
            ]
        }
    ]
}

References

Affected packages

Git / github.com/francoisjacquet/rosariosis

Affected ranges

Type

GIT

Repo

https://github.com/francoisjacquet/rosariosis

Events

Introduced

fceafbc791e5251fee5aeb69cb6a0f726ff32192

Fixed

6234a0ee0124c0667c824693ac77164f18946ddf

Fixed

5354fd163477e317cc9fe322bc7b36a21d6f9c83

Database specific

Show details

{
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ],
    "extracted_events": [
        {
            "introduced": "12.7.1"
        },
        {
            "last_affected": "12.7.1"
        },
        {
            "introduced": "12.7.2"
        },
        {
            "last_affected": "12.7.2"
        },
        {
            "introduced": "12.7.3"
        },
        {
            "last_affected": "12.7.3"
        },
        {
            "introduced": "12.7.4"
        },
        {
            "last_affected": "12.7.4"
        }
    ]
}

Affected versions

12.*

12.7.1

12.7.2

12.7.3

12.7.4

v12.*

v12.7.1

v12.7.2

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-19785.json"