Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2024-4993

SQL injection vulnerability in SiAdmin

Description

Vulnerability in SiAdmin 1.1 that allows XSS via the /show.php query parameter. This vulnerability could allow a remote attacker to send a specially crafted URL to an authenticated user and thereby steal their cookie session credentials.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SiAdmin SiAdmin

Default version status: unaffected

  • 1.1affected

References