Vulnerabilities > Kujirahand > Konawiki > 2.1.0.1

DATE CVE VULNERABILITY TITLE RISK
2021-05-20 CVE-2021-20720 SQL Injection vulnerability in Kujirahand Konawiki
SQL injection vulnerability in the KonaWiki2 versions prior to 2.2.4 allows remote attackers to execute arbitrary SQL commands and to obtain/alter the information stored in the database via unspecified vectors.
network
low complexity
kujirahand CWE-89
7.5
2021-05-20 CVE-2021-20721 Unrestricted Upload of File with Dangerous Type vulnerability in Kujirahand Konawiki
KonaWiki2 versions prior to 2.2.4 allows a remote attacker to upload arbitrary files via unspecified vectors.
network
low complexity
kujirahand CWE-434
7.5
2020-07-29 CVE-2020-5614 Path Traversal vulnerability in Kujirahand Konawiki
Directory traversal vulnerability in KonaWiki 3.1.0 and earlier allows remote attackers to read arbitrary files via unspecified vectors.
network
low complexity
kujirahand CWE-22
5.0
2020-07-29 CVE-2020-5613 Cross-site Scripting vulnerability in Kujirahand Konawiki
Cross-site scripting vulnerability in KonaWiki 3.1.0 and earlier allows remote attackers to execute an arbitrary script via a specially crafted URL.
network
kujirahand CWE-79
4.3
2020-07-29 CVE-2020-5612 Cross-site Scripting vulnerability in Kujirahand Konawiki
Cross-site scripting vulnerability in KonaWiki 2.2.0 and earlier allows remote attackers to execute an arbitrary script via a specially crafted URL.
network
kujirahand CWE-79
4.3