CVE-2021-20720
- EPSS 0.54%
- Veröffentlicht 20.05.2021 02:15:07
- Zuletzt bearbeitet 21.11.2024 05:47:04
SQL injection vulnerability in the KonaWiki2 versions prior to 2.2.4 allows remote attackers to execute arbitrary SQL commands and to obtain/alter the information stored in the database via unspecified vectors.
CVE-2021-20721
- EPSS 0.68%
- Veröffentlicht 20.05.2021 02:15:07
- Zuletzt bearbeitet 21.11.2024 05:47:04
KonaWiki2 versions prior to 2.2.4 allows a remote attacker to upload arbitrary files via unspecified vectors. If the file contains PHP scripts, arbitrary code may be executed.
CVE-2020-5612
- EPSS 0.42%
- Veröffentlicht 29.07.2020 02:15:12
- Zuletzt bearbeitet 21.11.2024 05:34:21
Cross-site scripting vulnerability in KonaWiki 2.2.0 and earlier allows remote attackers to execute an arbitrary script via a specially crafted URL.
CVE-2020-5613
- EPSS 0.42%
- Veröffentlicht 29.07.2020 02:15:12
- Zuletzt bearbeitet 21.11.2024 05:34:21
Cross-site scripting vulnerability in KonaWiki 3.1.0 and earlier allows remote attackers to execute an arbitrary script via a specially crafted URL.
CVE-2020-5614
- EPSS 0.26%
- Veröffentlicht 29.07.2020 02:15:12
- Zuletzt bearbeitet 21.11.2024 05:34:21
Directory traversal vulnerability in KonaWiki 3.1.0 and earlier allows remote attackers to read arbitrary files via unspecified vectors.