Vulnerabilities

TI-2022-22304 CVE-2022-45326 · GHSA-ggpq-cprg-v67r

An XML external entity (XXE) injection vulnerability in Kwoksys Kwok Information Server…

LOW 25

An XML external entity (XXE) injection vulnerability in Kwoksys Kwok Information Server before v2.9.5.SP31 allows remote authenticated users to conduct server-side request forgery (SSRF) attacks.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01194 Published 2022-12-06 No fix listed CWE-611

TI-2013-04397 CVE-2013-5028 · GHSA-cgc8-pffc-72mr

SQL injection vulnerability in IT/hardware-list.dll in Kwoksys Kwok Information Server…

LOW 33

SQL injection vulnerability in IT/hardware-list.dll in Kwoksys Kwok Information Server before 2.8.5 allows remote authenticated users to execute arbitrary SQL commands via the (1) hardwareType, (2) hardwareStatus, or (3)…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01947 Published 2013-10-11 No fix listed CWE-89

Vulnerabilities

Filters

An XML external entity (XXE) injection vulnerability in Kwoksys Kwok Information Server…

SQL injection vulnerability in IT/hardware-list.dll in Kwoksys Kwok Information Server…