Vulnerabilities

TI-2023-26250 CVE-2023-48395 · GHSA-f28x-rjg5-px57

Kaifa Technology WebITR - SQL Injection

LOW 38

Kaifa Technology WebITR is an online attendance system, it has insufficient validation for user input within a special function.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00709 Published 2023-12-15 No fix listed CWE-89

TI-2023-26249 CVE-2023-48394 · GHSA-j8v2-m2f3-8jgf

MEDIUM 40

Kaifa Technology WebITR is an online attendance system, its file uploading function does not restrict upload of file with dangerous type.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00886 Published 2023-12-15 No fix listed CWE-434

TI-2023-26248 CVE-2023-48393 · GHSA-7www-x428-rw8w

LOW 21

Kaifa Technology WebITR is an online attendance system.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0057 Published 2023-12-15 No fix listed CWE-209

TI-2023-26247 CVE-2023-48392 · GHSA-wv9r-p2rc-jcrp

MEDIUM 43

Kaifa Technology WebITR is an online attendance system, it has a vulnerability in using hard-coded encryption key.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0057 Published 2023-12-15 No fix listed CWE-321