CVE-2020-37046 Sistem Informasi Pengumuman Kelulusan Online 1.0 - Cross-Site Request Forgery

Sistem Informasi Pengumuman Kelulusan Online 1.0 contains a cross-site request forgery vulnerability that allows attackers to add unauthorized admin users through the tambahuser.php endpoint. Attackers can craft a malicious HTML form to submit admin credentials and create new administrative...

Adikiss System Information Announcement System for Online Graduation: Cross-site Request Forgery Vulnerability

Adikiss Sistem Informasi Pengumuman Kelulusan Online is a campus information system developed by Adikiss Corporation. Version 1.0 of Adikiss Sistem Informasi Pengumuman Kelulusan Online contains a cross-site request forgeing vulnerability. This vulnerability stems from the tambahuser.php endpoint...