CVE-2020-15718

Name of the Vulnerable Software and Affected Versions RosarioSIS version 6.7.2

Description The issue is caused by improper validation of user-supplied input by the PrintSchedules.php script, allowing a remote attacker to exploit it using the include inactive parameter in a crafted URL.

Recommendations For RosarioSIS version 6.7.2, consider disabling the PrintSchedules.php script or restricting access to it until a patch is available. Avoid using the include inactive parameter in crafted URLs to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.