Adikiss Sistem Informasi Pengumuman Kelulusan Online vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Adikiss Sistem Informasi Pengumuman Kelulusan Online: 1 record(s), with affected versions and fixes.

CVE-2020-37046 Medium · 5.3 CWE-352 Jan 30, 2026

Sistem Informasi Pengumuman Kelulusan Online 1.0 - Cross-Site Request Forgery

Sistem Informasi Pengumuman Kelulusan Online 1.0 contains a cross-site request forgery vulnerability that allows attackers to add unauthorized admin users through the tambahuser.php endpoint. Attackers can craft a malicious HTML form to submit admin credentials and create new administrative accounts without the victim's consent.