Kwoksys

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Kwoksys records in CISA KEV

No Kwoksys vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Information Server 2 records LOW

Records

2 records

TI-2013-04397 CVE-2013-5028 · GHSA-cgc8-pffc-72mr

SQL injection vulnerability in IT/hardware-list.dll in Kwoksys Kwok Information Server…

LOW 33

SQL injection vulnerability in IT/hardware-list.dll in Kwoksys Kwok Information Server before 2.8.5 allows remote authenticated users to execute arbitrary SQL commands via the (1) hardwareType, (2) hardwareStatus, or (3)…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01947 Published 2013-10-11 No fix listed CWE-89

TI-2022-22304 CVE-2022-45326 · GHSA-ggpq-cprg-v67r

An XML external entity (XXE) injection vulnerability in Kwoksys Kwok Information Server…

LOW 25

An XML external entity (XXE) injection vulnerability in Kwoksys Kwok Information Server before v2.9.5.SP31 allows remote authenticated users to conduct server-side request forgery (SSRF) attacks.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01194 Published 2022-12-06 No fix listed CWE-611

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0