Omran vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Omran products: 1 record(s), with severity, exploitation and fixes.

Fikir Odalari Adminpando 1

Exploited only (KEV) →

CVE-2025-10878 Critical · 10.0 CWE-89 Feb 3, 2026

Fikir Odalari AdminPando 1.0.1 SQL Injection Authentication Bypass in Login

A SQL injection vulnerability exists in the login functionality of Fikir Odalari AdminPando 1.0.1 before 2026-01-26. The username and password parameters are vulnerable to SQL injection, allowing unauthenticated attackers to bypass authentication completely. Successful exploitation grants full administrative access to the application, including the ability to manipulate the public-facing website content (HTML/DOM manipulation).