Vendor

RafyMrX

1 brief RSS

CVE-2026-15489: SQL Injection in RafyMrX TOKO-ONLINE-ROTI login.php

A critical SQL injection vulnerability (CVE-2026-15489) exists in RafyMrX TOKO-ONLINE-ROTI, allowing remote attackers to bypass authentication and potentially exfiltrate sensitive data by manipulating the 'Username' argument in the 'proses/login.php' file, with a public exploit available.

TOKO-ONLINE-ROTI web-vulnerability sql-injection initial-access public-exploit web-exploitation cve remote-code-execution

2r 4t 1c 59m ago