Skip to content
OpenAdvisories
Critical · 9.8 CVE-2024-4991 EUVD-2024-44541GHSA-gv4j-wxpw-jhf8

SQL injection vulnerability in SiAdmin

Published May 16, 2024 · Updated Aug 1, 2024 · Assigned by INCIBE

Description

Vulnerability in SiAdmin 1.1 that allows SQL injection via the /modul/mod_pass/aksi_pass.php parameter in nama_lengkap. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the system and retrieve all the information stored in it.

Affected products

VendorProductAffectedFixed
SiAdmin SiAdmin 1.1 —

References