CVE-2024-4993 — SQL injection vulnerability in SiAdmin
Vulnerability in SiAdmin 1.1 that allows XSS via the /show.php query parameter. This vulnerability could allow a remote attacker to send a specially crafted URL to an authentica…
Published: 2024-05-16 · CVSS: 6.3 · CVSS 3.1
Vulnerability in SiAdmin 1.1 that allows XSS via the /show.php query parameter. This vulnerability could allow a remote attacker to send a specially crafted URL to an authenticated user and thereby steal their cookie session credentials.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7