Skip to content
OpenAdvisories
Medium · 6.3 CVE-2024-4993 EUVD-2024-44543GHSA-9r27-x94r-9x9c

SQL injection vulnerability in SiAdmin

Published May 16, 2024 · Updated Aug 1, 2024 · Assigned by INCIBE

Description

Vulnerability in SiAdmin 1.1 that allows XSS via the /show.php query parameter. This vulnerability could allow a remote attacker to send a specially crafted URL to an authenticated user and thereby steal their cookie session credentials.

Affected products

VendorProductAffectedFixed
SiAdmin SiAdmin 1.1 —

References