Skip to content
OpenAdvisories

Product · Simpkh

SIM-PKH

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.1
    CVE-2018-25410

    SIM-PKH 2.4.1 SQL Injection via media.php id Parameter

    SIM-PKH 2.4.1 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'id' parameter. Attackers can send GET requests to /admin/media.php with module=pengurus and act…

    Simpkh SIM-PKH
  • High 8.8
    CVE-2018-25409

    SIM-PKH 2.4.1 Arbitrary File Upload via aksi_pengurus.php

    SIM-PKH 2.4.1 contains an arbitrary file upload vulnerability that allows authenticated attackers to upload malicious files by submitting PHP code through the fupload parameter. Attackers can upload PHP files via the aksi_pengurus.php endpoint with module=pen…

    Simpkh SIM-PKH