Konawiki Security Vulnerabilities and Issues — Konawiki CVE List

Lucene search

KujirahandKonawiki

5 matches found

CVE•added 2021/05/20 2:15 a.m.•98 views

CVE-2021-20721

KonaWiki2 versions prior to 2.2.4 allows a remote attacker to upload arbitrary files via unspecified vectors. If the file contains PHP scripts, arbitrary code may be executed.

9.8CVSS9.5AI score0.00675EPSS

CVE•added 2021/05/20 2:15 a.m.•79 views

CVE-2021-20720

SQL injection vulnerability in the KonaWiki2 versions prior to 2.2.4 allows remote attackers to execute arbitrary SQL commands and to obtain/alter the information stored in the database via unspecified vectors.

9.8CVSS9.7AI score0.00537EPSS

CVE•added 2020/07/29 2:15 a.m.•52 views

CVE-2020-5614

Directory traversal vulnerability in KonaWiki 3.1.0 and earlier allows remote attackers to read arbitrary files via unspecified vectors.

5.3CVSS5.4AI score0.00258EPSS

CVE•added 2020/07/29 2:15 a.m.•49 views

CVE-2020-5613

Cross-site scripting vulnerability in KonaWiki 3.1.0 and earlier allows remote attackers to execute an arbitrary script via a specially crafted URL.

6.1CVSS6.2AI score0.00422EPSS

CVE•added 2020/07/29 2:15 a.m.•46 views

CVE-2020-5612

Cross-site scripting vulnerability in KonaWiki 2.2.0 and earlier allows remote attackers to execute an arbitrary script via a specially crafted URL.

6.1CVSS6.2AI score0.00422EPSS