Eregistrasi-kejuaraan-silat vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Eregistrasi-kejuaraan-silat products: 1 record(s), with severity, exploitation and fixes.

Registrasi Pencak Silat 1

Exploited only (KEV) →

CVE-2018-25385 High · 8.2 CWE-89 May 29, 2026

E-Registrasi Pencak Silat 18.10 SQL Injection via id_partai

E-Registrasi Pencak Silat 18.10 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id_partai parameter. Attackers can send GET requests to monitor_nilai.php with crafted SQL payloads in the id_partai parameter to extract sensitive database information including admin credentials and user data.