siadmin vulnerabilities and fixes

Recent CVEs affecting siadmin, with upgrade or downgrade steps. 3 tracked.

siadmin has 3 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 0. Most recent: 2024-05-16. Highest priority: CVE-2024-4992 (score 50/100).

• CVE-2024-4993 MEDIUM 6.3 DOWNGRADE Vulnerability in SiAdmin 1.1 that allows XSS via the /show.php query parameter
• CVE-2024-4992 CRITICAL 9.8 DOWNGRADE Vulnerability in SiAdmin 1.1 that allows SQL injection via the /modul/mod_kuliah/aksi_kuliah.php parameter in
• CVE-2024-4991 CRITICAL 9.8 DOWNGRADE Vulnerability in SiAdmin 1.1 that allows SQL injection via the /modul/mod_pass/aksi_pass.php parameter in nama

FAQ

How do I fix siadmin vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is siadmin being exploited right now?

None of the tracked siadmin CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which siadmin CVE should I patch first?

CVE-2024-4992 currently ranks highest (50/100): Vulnerability in SiAdmin 1.1 that allows SQL injection via the /modul/mod_kuliah/aksi_kuliah.php parameter in .

RSS feed for siadmin · ← Back to latest CVEs