CVE-2024-4992

CRITICAL 9.8CVE-2024-4992 · Published 16/05/2024 · updated 17/06/2026

In short

CVE-2024-4992 is a CRITICAL (CVSS 9.8) vulnerability affecting siadmin (ansanwan).
Chance of exploitation in the next 30 days (EPSS): 0.49%, higher than 42.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
siadmin ansanwan	`= 1.1`	No fix yet

Description

Vulnerability in SiAdmin 1.1 that allows SQL injection via the /modul/mod_kuliah/aksi_kuliah.php parameter in nim. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the system and retrieve all the information stored in it.

References

incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-siadmin · Third Party Advisory

More vulnerabilities in siadmin

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free