CVE-2024-45622

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

ASIS (aka Aplikasi Sistem Sekolah using CodeIgniter 3) 3.0.0 through 3.2.0 allows index.php username SQL injection for Authentication Bypass.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Sep 2, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-456239.8D-Link DAP-2310 Hardware A Firmware 1.16RC028 allows remote attackers to execute arbitrary code via a stack-based buffer overflow in the ATPCVE-2024-456247.5Exposure of sensitive information due to incompatible policies issue exists in Pgpool-II. If a database user accesses a query cache, table dCVE-2024-456256.1Cross-site scripting vulnerability exists in Forminator versions prior to 1.34.1. If this vulnerability is exploited, an arbitrary script maCVE-2024-456267.5Apache James server JMAP HTML to text plain implementation in versions below 3.8.2 and 3.7.6 is subject to unbounded memory consumption thatCVE-2024-456275.9In Apache Linkis <1.7.0, due to the lack of effective filtering of parameters, an attacker configuring malicious Mysql JDBC parameters in thCVE-2024-45637.5The Progress MOVEit Automation configuration export function prior to 2024.0.0 uses a cryptographic method with insufficient bit length.CVE-2024-456364.4IBM Security QRadar EDR 3.12 through 3.12.24 stores user credentials in plain text which can be read by a local privileged user.CVE-2024-456384.4IBM Security QRadar 3.12 EDR stores user credentials in plain text which can be read by a local privileged user.CVE-2024-45646.4The CoDesigner WooCommerce Builder for Elementor – Customize Checkout, Shop, Email, Products & More plugin for WordPress is vulnerable to StCVE-2024-456405.3IBM Security ReaQta 3.12 returns sensitive information in an HTTP response that could be used in further attacks against the system.CVE-2024-456416.5IBM Security ReaQta EDR 3.12 could allow an attacker to perform unauthorized actions due to improper SSL certificate validation.CVE-2024-456425.3IBM Security ReaQta 3.12 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript co
CVE-2024-45622: Critical severity, CVSS 9.8 | Vulnix