Read the docs

HAMASTAR Technology

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

HAMASTAR Technology records in CISA KEV

No HAMASTAR Technology vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

6 records

Priority MEDIUM 49

MeetingHub developed by HAMASTAR Technology has an Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on th…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00748 Published 2026-01-22 No fix listed CWE-434
Priority MEDIUM 49

The WIMP website co-construction management platform from HAMASTAR Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete data…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00526 Published 2025-06-16 No fix listed CWE-89
Priority MEDIUM 47

A Plaintext Storage of a Password vulnerability in ebooknote function in Hamastar MeetingHub Paperless Meetings 2021 allows remote attackers to obtain the other users’ credentials and gain access to the product via an XM…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00484 Published 2024-08-05 No fix listed CWE-256
Priority MEDIUM 45

MeetingHub developed by HAMASTAR Technology has an Arbitrary File Read vulnerability, allowing unauthenticated remote attackers to exploit Absolute Path Traversal to download arbitrary system files.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00661 Published 2026-01-22 No fix listed CWE-36
Priority MEDIUM 43

A Unrestricted upload of file with dangerous type vulnerability in meeting management function in Hamastar MeetingHub Paperless Meetings 2021 allows remote authenticated users to perform arbitrary system commands via a c…

CVSS 4.0CRITICAL 9.3 Network Low privileges No interaction EPSS 0.00523 Published 2024-08-05 No fix listed CWE-434
Priority LOW 37

MeetingHub developed by HAMASTAR Technology has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to access specific API functions and obtain meeting-related information.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00453 Published 2026-01-22 No fix listed CWE-306
Open these records in search →