SiAdmin

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

SiAdmin records in CISA KEV

No SiAdmin vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Siadmin · all components

TI-2024-04636 CVE-2024-4992 · GHSA-3p4g-gcq8-j93v

MEDIUM 49

Vulnerability in SiAdmin 1.1 that allows SQL injection via the /modul/mod_kuliah/aksi_kuliah.php parameter in nim.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00487 Published 2024-05-16 No fix listed CWE-89

TI-2024-04635 CVE-2024-4991 · GHSA-gv4j-wxpw-jhf8

MEDIUM 49

Vulnerability in SiAdmin 1.1 that allows SQL injection via the /modul/mod_pass/aksi_pass.php parameter in nama_lengkap.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00487 Published 2024-05-16 No fix listed CWE-89

TI-2024-04637 CVE-2024-4993 · GHSA-9r27-x94r-9x9c

LOW 28

Vulnerability in SiAdmin 1.1 that allows XSS via the /show.php query parameter.

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00302 Published 2024-05-16 No fix listed CWE-79