CVE-2020-15716
Description
RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-supplied input by the Preferences.php script. A remote attacker could exploit this vulnerability using the tab parameter in a crafted URL.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- RosarioSIS/RosarioSISdescription
- Range: <= 6.7.2
Patches
Vulnerability mechanics
Root cause
"Improper validation of user-supplied input in the `tab` parameter of Preferences.php allows reflected cross-site scripting."
Attack vector
An unauthenticated remote attacker can craft a URL containing a malicious `tab` parameter (e.g., `tab=1%22onmouseover%3d%22alert(%60xss%60)`) and trick a logged-in victim into clicking it [ref_id=1]. When the victim's browser renders the Preferences.php page, the unsanitized `tab` value is injected into the HTML, causing the attacker's JavaScript to execute in the victim's session context [CWE-79]. The attack requires no special privileges and is delivered via a GET request over HTTP [ref_id=1].
Affected code
The vulnerability is in `modules/Users/Preferences.php`, where the `tab` parameter from `$_REQUEST['tab']` is directly echoed into a `
What the fix does
The patch replaces the direct concatenation of `$_REQUEST['tab']` into the form action with the `URLEscape()` function, which properly encodes special characters [ref_id=2]. The diff shows the change from `echo '
Preconditions
- authVictim must be logged into RosarioSIS
- inputAttacker must craft a URL with a malicious tab parameter
- inputVictim must click the crafted URL (user interaction required)
Reproduction
1. Log in to RosarioSIS as an admin user. 2. Send a GET request to `http://rosariosis/Modules.php?modname=Users/Preferences.php&tab=%22%20onmouseover%3Dalert%281%29%20x%3D%22` [ref_id=3]. 3. Observe that the JavaScript executes when the page renders, confirming the XSS [ref_id=1][ref_id=3].
Generated on May 26, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.
References
6- exchange.xforce.ibmcloud.com/vulnerabilities/184942mitre
- github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2020-15716.mdmitre
- gitlab.com/francoisjacquet/rosariosis/-/blob/mobile/CHANGES.mdmitre
- gitlab.com/francoisjacquet/rosariosis/-/commit/89ae9de732024e3a2e99262aa98b400a1aa6975amitre
- gitlab.com/francoisjacquet/rosariosis/-/issues/291mitre
- gitlab.com/francoisjacquet/rosariosis/-/tags/v6.8-betamitre
News mentions
0No linked articles in our index yet.