These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
A vulnerability has been found in RafyMrX TOKO-ONLINE-ROTI up to ddfe1cd587be0a0b5135d8b6e85cce2ec3aece99. Affected is an unknown function of the file proses/add.php. The manipulation of the argument kd_cs leads to authorization bypass. The attack is possible to be carried out remotely. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected [truncated]
A weakness has been identified in RafyMrX TOKO-ONLINE-ROTI up to ddfe1cd587be0a0b5135d8b6e85cce2ec3aece99, affecting an unknown part and leading to missing authentication. The attack is possible to be carried out remotely. The product adopts a rolling release strategy, making it difficult to specify version details for affected or updated releases. Security teams and administrators responsible for RafyMrX [truncated]
A security flaw has been discovered in RafyMrX TOKO-ONLINE-ROTI up to ddfe1cd587be0a0b5135d8b6e85cce2ec3aece99. The vulnerability affects some unknown functionality of the file proses/add.php, allowing remote attackers to inject malicious SQL code by manipulating the kode_produk/kd_cs argument. This SQL injection vulnerability has a CVSS score of 5.5 and is considered a medium priority issue. Users of Raf [truncated]
CVE-2026-15489 is a sql injection vulnerability in RafyMrX TOKO-ONLINE-ROTI. The CVE record was published on 2026-07-12T09:16:39.913Z and has not been modified since then. This vulnerability affects an unknown functionality of the file proses/login.php, where the manipulation of the argument Username leads to sql injection. Remote exploitation of the attack is possible. Users of RafyMrX TOKO-ONLINE-ROTI s [truncated]