KonaWiki2 versions prior to 2.2.4 allows a remote attacker to upload arbitrary files via unspecified vectors. If the file contains PHP scripts, arbitrary code may be executed.
Search vulnerabilities
CVE-2021-20721
CVSS 3.1 · 9.8 Critical
EPSS 1.5%
KEV · Not listed
Vendors
Products
CVE-2021-20720
SQL injection vulnerability in the KonaWiki2 versions prior to 2.2.4 allows remote attackers to execute arbitrary SQL commands and to obtain/alter the information stored in the database via unspecified vectors.
CVSS 3.1 · 9.8 Critical
EPSS 1.3%
KEV · Not listed
Vendors
Products
CVE-2020-5614
Directory traversal vulnerability in KonaWiki 3.1.0 and earlier allows remote attackers to read arbitrary files via unspecified vectors.
CVSS 3.1 · 5.3 Medium
EPSS 2.2%
KEV · Not listed
Vendors
Products
CVE-2020-5613
Cross-site scripting vulnerability in KonaWiki 3.1.0 and earlier allows remote attackers to execute an arbitrary script via a specially crafted URL.
CVSS 3.1 · 6.1 Medium
EPSS 1.1%
KEV · Not listed
Vendors
Products
CVE-2020-5612
Cross-site scripting vulnerability in KonaWiki 2.2.0 and earlier allows remote attackers to execute an arbitrary script via a specially crafted URL.
CVSS 3.1 · 6.1 Medium
EPSS 1.1%
KEV · Not listed
Vendors
Products
Page 1 of 1.