Skip to content
Threat Feed
Subscribe

Product

TOKO-ONLINE-ROTI (Up to Ddfe1cd587be0a0b5135d8b6e85cce2ec3aece99)

1 brief RSS
high advisory

CVE-2026-15489: SQL Injection in RafyMrX TOKO-ONLINE-ROTI login.php

A critical SQL injection vulnerability (CVE-2026-15489) exists in RafyMrX TOKO-ONLINE-ROTI, allowing remote attackers to bypass authentication and potentially exfiltrate sensitive data by manipulating the 'Username' argument in the 'proses/login.php' file, with a public exploit available.

TOKO-ONLINE-ROTI web-vulnerability sql-injection initial-access public-exploit web-exploitation cve remote-code-execution
2r 4t 1c