Vulnerabilities > Kujirahand > Konawiki > Critical

DATE CVE VULNERABILITY TITLE RISK
2021-05-20 CVE-2021-20721 Unrestricted Upload of File with Dangerous Type vulnerability in Kujirahand Konawiki
KonaWiki2 versions prior to 2.2.4 allows a remote attacker to upload arbitrary files via unspecified vectors.
network
low complexity
kujirahand CWE-434
critical
9.8
2021-05-20 CVE-2021-20720 SQL Injection vulnerability in Kujirahand Konawiki
SQL injection vulnerability in the KonaWiki2 versions prior to 2.2.4 allows remote attackers to execute arbitrary SQL commands and to obtain/alter the information stored in the database via unspecified vectors.
network
low complexity
kujirahand CWE-89
critical
9.8