CVE-2023-29918

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

RosarioSIS 10.8.4 is vulnerable to CSV injection via the Periods Module.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-1236

Affected software

No affected versions have been published.

Timeline

Published
May 2, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-299199.1SolarView Compact <= 6.0 is vulnerable to Insecure Permissions. Any file on the server can be read or modified because texteditor.php is notCVE-2023-29927.5An unauthenticated  denial of service vulnerability exists in the SMM v1, SMM v2, and FPC management web server which can be triggered underCVE-2023-299215.3PowerJob V4.3.1 is vulnerable to Incorrect Access Control via the create app interface.CVE-2023-299225.3PowerJob V4.3.1 is vulnerable to Incorrect Access Control via the create user/save interface.CVE-2023-299235.3PowerJob V4.3.1 is vulnerable to Insecure Permissions. via the list job interface.CVE-2023-299249.8PowerJob V4.3.1 is vulnerable to Incorrect Access Control that allows for remote code execution.CVE-2023-299269.8PowerJob V4.3.2 has unauthorized interface that causes remote code execution.CVE-2023-299274.3Versions of Sage 300 through 2022 implement role-based access controls that are only enforced client-side. Low-privileged Sage users, particCVE-2023-299297.5Buffer Overflow vulnerability found in Kemptechnologies Loadmaster before v.7.2.60.0 allows a remote attacker to casue a denial of service vCVE-2023-29936.3A valid, authenticated user with limited privileges may be able to use specifically crafted web management server API calls to execute a limCVE-2023-299308.8An issue was found in Genesys CIC Polycom phone provisioning TFTP Server all version allows a remote attacker to execute arbitrary code via CVE-2023-299319.8laravel-s 3.7.35 is vulnerable to Local File Inclusion via /src/Illuminate/Laravel.php.
CVE-2023-29918: Medium severity, CVSS 5.4 | Vulnix