Lucene search
INCIBECVELIST:CVE-2024-4993HistoryMay 16, 2024 - 11:44 a.m.
CVE-2024-4993 SQL injection vulnerability in SiAdmin
2024-05-1611:44:47
CWE-79
INCIBE
raw.githubusercontent.com
5
siadmin
sql injection
xss
vulnerability
remote attacker
authenticated user
cookie session credentials
Vulnerability in SiAdmin 1.1 that allows XSS via the /show.php query parameter. This vulnerability could allow a remote attacker to send a specially crafted URL to an authenticated user and thereby steal their cookie session credentials.
