PT-2026-5871 · Fikir Odalari · Adminpando
CVE-2025-10878
·
Publicado
2026-02-03
·
Atualizado
2026-02-03
CVSS v3.1
10
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Fikir Odalari AdminPando versions prior to 2026-01-26
Fikir Odalari AdminPando version 1.0.1
Description
A SQL injection issue exists in the login functionality. The
username and password parameters are susceptible to SQL injection, potentially allowing unauthenticated attackers to bypass authentication. Successful exploitation can grant full administrative access, including the ability to manipulate the public-facing website content (HTML/DOM manipulation).Recommendations
Versions prior to 2026-01-26 should be updated.
Version 1.0.1 should be updated.
Exploit
Correção
SQL injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Adminpando