Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

POC Details: 68a2eff9526c57b99f42ced843aa11cc20f652ad

Source
https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/other/rosariosis-xss.yaml
Associated Vulnerability

Likely 0-day

Description
RosarioSIS version 6.7.2 and earlier contains a reflected cross-site scripting (XSS) vulnerability in the Preferences module. The 'tab' parameter in Modules.php is not properly sanitized, allowing an attacker to inject arbitrary JavaScript code via a crafted URL.
File Snapshot

 id: rosariosis-xss

info:
  name: RosarioSIS 6.7.2 - Cross-Site Scripting
  author: 0xr2r,jarvis-sur

...
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →