K-iwi

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

K-iwi records in CISA KEV

No K-iwi vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record

TI-2018-13271 CVE-2018-18755 · GHSA-5w54-4wr8-6c23

MEDIUM 48

K-iwi Framework 1775 has SQL Injection via the admin/user/group/update user_group_id parameter or the admin/user/user/update user_id parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03099 Published 2018-11-16 No fix listed CWE-89