2 matches found
EUVD-2025-206676
A SQL injection vulnerability exists in the login functionality of Fikir Odalari AdminPando 1.0.1 before 2026-01-26. The username and password parameters are vulnerable to SQL injection, allowing unauthenticated attackers to bypass authentication completely. Successful exploitation grants full...
10CVSS5.7AI score0.00678EPSS
SaveExploits2References2
CVE-2025-10878: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability exists in the login functionality of Fikir Odalari AdminPando 1.0.1 before 2026-01-26. The username and password parameters are vulnerable to SQL injection, allowing unauthenticated attackers to bypass authentication completely. Successful exploitation grants full...
10CVSS5.9AI score0.00678EPSS
SaveExploits2References1
20