Vulnerabilidades do Adikiss Sistem Informasi Pengumuman Kelulusan Online

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Adikiss Sistem Informasi Pengumuman Kelulusan Online: 1 registro(s), com versões afetadas e correções.

CVE-2020-37046 Média · 5.3 CWE-352 30/01/2026

Sistem Informasi Pengumuman Kelulusan Online 1.0 - Cross-Site Request Forgery

Sistem Informasi Pengumuman Kelulusan Online 1.0 contains a cross-site request forgery vulnerability that allows attackers to add unauthorized admin users through the tambahuser.php endpoint. Attackers can craft a malicious HTML form to submit admin credentials and create new administrative accounts without the victim's consent.