CVE-2020-37046: Adikiss Sistem Informasi Pengumuman Kelulusan Online

Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days.

Sistem Informasi Pengumuman Kelulusan Online 1.0 contains a cross-site request forgery vulnerability that allows attackers to add unauthorized admin users through the tambahuser.php endpoint. Attackers can craft a malicious HTML form to submit admin credentials and create new administrative accounts without the victim's consent.

Affected products

• Adikiss Sistem Informasi Pengumuman Kelulusan Online

Published 2026-01-30. Last modified 2026-06-17.