CVE-2021-44566: 
PHP vulnerability analysis and mitigation

An unauthenticated SQL Injection vulnerability exists in RosarioSIS that allows attackers to execute arbitrary SQL commands (CISA). The vulnerability was discovered and disclosed in February 2022, affecting the RosarioSIS application.

The vulnerability is tracked as CVE-2021-44566 and allows attackers to perform SQL injection attacks through unauthenticated access. The vulnerability exists in the application's handling of SQL queries, where user input is not properly sanitized before being used in database operations (CISA).

The vulnerability allows malicious actors to execute arbitrary SQL commands on the underlying database without requiring authentication. This could potentially lead to unauthorized access to sensitive data, modification of database contents, or compromise of the entire database system (CISA).