Skip to main content

Siadmin

3 CVEs product

Monthly

CVE-2024-4993 MEDIUM This Month

Vulnerability in SiAdmin 1.1 that allows XSS via the /show.php query parameter. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP XSS Siadmin
NVD
CVSS 3.1
5.4
EPSS
0.3%
CVE-2024-4992 CRITICAL Act Now

Vulnerability in SiAdmin 1.1 that allows SQL injection via the /modul/mod_kuliah/aksi_kuliah.php parameter in nim. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

SQLi PHP Siadmin
NVD
CVSS 3.1
9.8
EPSS
0.5%
CVE-2024-4991 CRITICAL Act Now

Vulnerability in SiAdmin 1.1 that allows SQL injection via the /modul/mod_pass/aksi_pass.php parameter in nama_lengkap. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

SQLi PHP Siadmin
NVD
CVSS 3.1
9.8
EPSS
0.5%
EPSS 0% CVSS 5.4
MEDIUM This Month

Vulnerability in SiAdmin 1.1 that allows XSS via the /show.php query parameter. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP XSS Siadmin
NVD
EPSS 0% CVSS 9.8
CRITICAL Act Now

Vulnerability in SiAdmin 1.1 that allows SQL injection via the /modul/mod_kuliah/aksi_kuliah.php parameter in nim. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

SQLi PHP Siadmin
NVD
EPSS 0% CVSS 9.8
CRITICAL Act Now

Vulnerability in SiAdmin 1.1 that allows SQL injection via the /modul/mod_pass/aksi_pass.php parameter in nama_lengkap. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

SQLi PHP Siadmin
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy