ASIS (aka Aplikasi Sistem Sekolah using CodeIgniter 3) 3.0.0 through 3.2.0 allows index.php username SQL injection for Authentication Bypass.
History

Tue, 03 Sep 2024 16:30:00 +0000

Type Values Removed Values Added
First Time appeared Asis
Asis asis
Weaknesses CWE-89
CPEs cpe:2.3:a:asis:asis:*:*:*:*:*:*:*:*
Vendors & Products Asis
Asis asis
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Mon, 02 Sep 2024 19:15:00 +0000

Type Values Removed Values Added
Description ASIS (aka Aplikasi Sistem Sekolah using CodeIgniter 3) 3.0.0 through 3.2.0 allows index.php username SQL injection for Authentication Bypass.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2024-09-02T00:00:00

Updated: 2024-09-03T15:17:21.055Z

Reserved: 2024-09-02T00:00:00

Link: CVE-2024-45622

cve-icon Vulnrichment

Updated: 2024-09-03T15:17:16.360Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2024-09-02T19:15:13.170

Modified: 2024-09-03T16:35:09.647

Link: CVE-2024-45622

cve-icon Redhat

No data.