« Back to list

Endonesia

Endonesia Portal: vulnerabilities and CVEs

Endonesia Portal has 3 published vulnerabilities, 3 of them in the last 12 months. 0 are rated critical and 0 are listed by CISA as actively exploited.

CVEs3
Last 12 months3
Critical0
Actively exploited0

All vulnerabilities in the catalogue →⭐ Follow this technology

Latest vulnerabilities

CVESeverityEPSSActive exploitationPublishedDescription
CVE-2018-25406High (8.8)0.27%—May 30, 2026
eNdonesia Portal 8.7 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through parameters in mod.php. Attackers can inject…
CVE-2018-25405High (8.8)0.27%—May 30, 2026
eNdonesia Portal 8.7 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through parameters in mod.php. Attackers can inject…
CVE-2019-25643High (8.8)0.35%—Mar 24, 2026
eNdonesia Portal v8.7 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the bid parameter. Attackers can send GET…

🎯 How it gets exploited (ATT&CK techniques)

  1. T1005 Data from Local System3
  2. T1190 Exploit Public-Facing Application3

Number of CVEs of this technology mapped to each exploitation or primary-impact technique.

Other products by Endonesia