Siadmin

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-4993 May 16, 12:15 MEDIUM This Month

Vulnerability in SiAdmin 1.1 that allows XSS via the /show.php query parameter. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP XSS Siadmin Ansanwan

NVD

CVSS 3.1

5.4

EPSS

0.3%

CVE-2024-4992 May 16, 12:15 CRITICAL Act Now

Vulnerability in SiAdmin 1.1 that allows SQL injection via the /modul/mod_kuliah/aksi_kuliah.php parameter in nim. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP SQLi Siadmin Ansanwan

NVD

CVSS 3.1

9.8

EPSS

0.5%

CVE-2024-4991 May 16, 12:15 CRITICAL Act Now

Vulnerability in SiAdmin 1.1 that allows SQL injection via the /modul/mod_pass/aksi_pass.php parameter in nama_lengkap. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP SQLi Siadmin Ansanwan

NVD

CVSS 3.1

9.8

EPSS

0.5%

CVE-2024-4993

EPSS 0% CVSS 5.4

MEDIUM This Month

PHP XSS Siadmin +1

NVD

CVE-2024-4992

EPSS 0% CVSS 9.8

CRITICAL Act Now

PHP SQLi Siadmin +1

NVD

CVE-2024-4991

EPSS 0% CVSS 9.8

CRITICAL Act Now

PHP SQLi Siadmin +1

NVD