Skip to content
OpenAdvisories
Critical · 9.8 CVE-2024-4992 EUVD-2024-44542GHSA-3p4g-gcq8-j93v

SQL injection vulnerability in SiAdmin

Published May 16, 2024 · Updated Aug 1, 2024 · Assigned by INCIBE

Description

Vulnerability in SiAdmin 1.1 that allows SQL injection via the /modul/mod_kuliah/aksi_kuliah.php parameter in nim. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the system and retrieve all the information stored in it.

Affected products

VendorProductAffectedFixed
SiAdmin SiAdmin 1.1 —

References