PT-2026-5485 · Unknown · Sistem Informasi Pengumuman Kelulusan Online

Extinction · Publicado 2026-01-30 · Atualizado 2026-01-31 · CVE-2020-37046

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Sistem Informasi Pengumuman Kelulusan Online version 1.0

Description The application contains a cross-site request forgery condition that permits attackers to add unauthorized admin users. This is achieved by exploiting the tambahuser.php endpoint, where malicious HTML forms can be used to submit admin credentials and create new administrative accounts without proper authorization.

Recommendations Apply updates to address the issue in the tambahuser.php endpoint.

Exploit

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2020-37046

Produtos afetados

Sistem Informasi Pengumuman Kelulusan Online

Referências · 6

• 🔥 https://exploit-db.com/exploits/48571 · Exploit
• https://vulncheck.com/advisories/sistem-informasi-pengumuman-kelulusan-online-cross-site-request-forgery · Nota
• https://adikiss.net/2014/06/aplikasi-sistem-informasi-pengumuman-kelulusan-online-2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2020-37046 · Nota de Segurança
• https://adikiss.net · Nota
• https://t.me/CVEtracker/43362 · Publicação no Telegram