Vulnerabilities (CVE)

Filtered by vendor Kujirahand Subscribe
Filtered by product Konawiki
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-20720 1 Kujirahand 1 Konawiki 2021-05-25 7.5 HIGH 9.8 CRITICAL
SQL injection vulnerability in the KonaWiki2 versions prior to 2.2.4 allows remote attackers to execute arbitrary SQL commands and to obtain/alter the information stored in the database via unspecified vectors.
CVE-2021-20721 1 Kujirahand 1 Konawiki 2021-05-25 7.5 HIGH 9.8 CRITICAL
KonaWiki2 versions prior to 2.2.4 allows a remote attacker to upload arbitrary files via unspecified vectors. If the file contains PHP scripts, arbitrary code may be executed.