https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 22:44:15 +0000 https://cve.radiocsirt.org/vuln/cve-2018-25386 <p><strong>Affected:</strong> Sitejo HaPe PKH</p> <p>HaPe PKH 1.1 contains multiple SQL injection vulnerabilities in admin/media.php that allow attackers to manipulate database queries by injecting SQL code through the &#39;id&#39; parameter. An unauthenticated attacker can exploit the desa module (module=desa&amp;act=hapus), while authenticated users can exploit the pengurus, fasilitas, and kelompok modules (for example act=print, act=editpengurus, act=editfasilitas, and act=editkelompok). Successful exploitation allows extraction of sensitive database information including the current user, database name, and DBMS version.</p> <p><strong>Affected:</strong> Sitejo HaPe PKH</p> <p>HaPe PKH 1.1 contains multiple SQL injection vulnerabilities in admin/media.php that allow attackers to manipulate database queries by injecting SQL code through the &#39;id&#39; parameter. An unauthenticated attacker can exploit the desa module (module=desa&amp;act=hapus), while authenticated users can exploit the pengurus, fasilitas, and kelompok modules (for example act=print, act=editpengurus, act=editfasilitas, and act=editkelompok). Successful exploitation allows extraction of sensitive database information including the current user, database name, and DBMS version.</p> https://cve.radiocsirt.org/vuln/cve-2018-25386