RSS   Vulnerabilities for 'Konawiki'   RSS

2021-05-20
 
CVE-2021-20720

CWE-89
 

 
SQL injection vulnerability in the KonaWiki2 versions prior to 2.2.4 allows remote attackers to execute arbitrary SQL commands and to obtain/alter the information stored in the database via unspecified vectors.

 
 
CVE-2021-20721

CWE-434
 

 
KonaWiki2 versions prior to 2.2.4 allows a remote attacker to upload arbitrary files via unspecified vectors. If the file contains PHP scripts, arbitrary code may be executed.

 
2020-07-29
 
CVE-2020-5614

CWE-22
 

 
Directory traversal vulnerability in KonaWiki 3.1.0 and earlier allows remote attackers to read arbitrary files via unspecified vectors.

 
 
CVE-2020-5613

CWE-79
 

 
Cross-site scripting vulnerability in KonaWiki 3.1.0 and earlier allows remote attackers to execute an arbitrary script via a specially crafted URL.

 
 
CVE-2020-5612

CWE-79
 

 
Cross-site scripting vulnerability in KonaWiki 2.2.0 and earlier allows remote attackers to execute an arbitrary script via a specially crafted URL.

 


Copyright 2024, cxsecurity.com

 

Back to Top