Skip to content
OpenAdvisories

Vendor

Endonesia

4 known vulnerabilities.

Products

eNdonesia Portal 4
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.2
    CVE-2018-25406

    eNdonesia Portal 8.7 SQL Injection via mod.php

    eNdonesia Portal 8.7 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through parameters in mod.php. Attackers can inject SQL through the artid, cid, did, contid,…

    Endonesia eNdonesia Portal
  • High 8.2
    CVE-2018-25407

    eNdonesia Portal 8.7 SQL Injection via mod.php

    eNdonesia Portal 8.7 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through parameters in mod.php. Attackers can inject SQL through the artid, cid, did, contid,…

    Endonesia eNdonesia Portal
  • High 8.2
    CVE-2018-25405

    eNdonesia Portal 8.7 SQL Injection via mod.php

    eNdonesia Portal 8.7 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through parameters in mod.php. Attackers can inject SQL through the artid, cid, did, contid,…

    Endonesia eNdonesia Portal
  • High 8.2
    CVE-2019-25643

    eNdonesia Portal v8.7 SQL Injection via banners.php

    eNdonesia Portal v8.7 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the bid parameter. Attackers can send GET requests to banners.php with crafted SQL …

    Endonesia eNdonesia Portal