Design/Logic Flaw

2021-05-2002:15:00

PRIOn knowledge base

www.prio-n.com

9.6 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.7%

JSON

KonaWiki2 versions prior to 2.2.4 allows a remote attacker to upload arbitrary files via unspecified vectors. If the file contains PHP scripts, arbitrary code may be executed.

CPENameOperatorVersion
konawikilt2.2.4

CPE	Name	Operator	Version
	konawiki	lt	2.2.4

References

jvn.jp/en/jp/JVN34232719/index.html

kujirahand.com/konawiki/