Adikiss vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Adikiss products: 1 record(s), with severity, exploitation and fixes.

Sistem Informasi Pengumuman Kelulusan Online 1

Exploited only (KEV) →

CVE-2020-37046 Medium · 5.3 CWE-352 Jan 30, 2026

Sistem Informasi Pengumuman Kelulusan Online 1.0 - Cross-Site Request Forgery

Sistem Informasi Pengumuman Kelulusan Online 1.0 contains a cross-site request forgery vulnerability that allows attackers to add unauthorized admin users through the tambahuser.php endpoint. Attackers can craft a malicious HTML form to submit admin credentials and create new administrative accounts without the victim's consent.