References https://pentest-tools.com/vulnerabilities-exploits/asis-sql-injection-authentication-bypass_23129 https://github.com/atoz-chevara/cve/blob/main/2024/ASIS_AplikasiSistemSekolah_Using_CodeIgniter3-SQL_Injection_Authentication_Bypass.md https://packetstormsecurity.com/files/181355/ASIS-3.2.0-SQL-Injection.html https://nvd.nist.gov/vuln/detail/CVE-2024-45622 https://cyberguardianhub.com/cve-2024-45622-asis-vulnerability-allows-sql-injection/ https://advisories.checkpoint.com/defense/advisories/public/2025/cpai-2024-1518.html/ https://download.csdn.net/blog/column/12934458/147260874
Related VulnerabilitiesPoCjohnson-controls-default-login: Johnson Controls Frick Quantum HD Compressors - Default LoginFlowise /api/v1/loginmethod 未授权访问漏洞(CVE-2026-56270)PoClitellm-default-login: LiteLLM - Default LoginPoCnet-vision-default-login: Net Vision UPS Monitor - Default LoginPoC3xui-default-login: 3X-UI - Default LoginPoC泛微E-cology10 /papi/passport/appnew/login/appLogin 未授权访问漏洞WordPress /wp-login.php 跨站脚本攻击漏洞(CVE-2026-64638)ZKTeco BioTime 平台 /accounts/login 默认口令漏洞PoCsentinel-default-login: Alibaba Sentinel - Default LoginPoC9router-default-login: 9Router - Default LoginPoCNginxWebUI /adminPage/login/getAuth 命令执行漏洞天锐绿盾审批系统 /trwfe/login.jsp/..;/thirdSystemConfig/findSingConfigPage.do SQL 注入漏洞Datart /api/v1/users/login 默认口令漏洞