Synchroweb kayıtları
synchroweb üreticisine ait 4 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
- CWE-59 Improper Link Resolution Before File Access ('Link Following')1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
4 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
31İzleyin | CVE-2013-2690Kavram kanıtı | SQL injection vulnerability in index.php in Synchroweb Technology SynConnect 2.0 allows remote attackers to execute arbitrary SQL commands vsynchroweb · synconnect · CWE-89 | Yüksek7,5 | — | %2,5 | 28 Mar 2013 |
29İzleyin | CVE-2025-11189İstismar yok | The Kiwire Captive Portal contains a reflected cross-site scripting (XSS) vulnerability within the login-url parameter, allowing for Javascrsynchroweb · kiwire · CWE-79 | Yüksek7,3 | — | %0,4 | 10 Eki 2025 |
29İzleyin | CVE-2025-11188İstismar yok | The Kiwire Captive Portal contains a blind SQL injection in the nas-id parameter, allowing for SQL commands to be issued and to compromise tsynchroweb · kiwire · CWE-89 | Yüksek7,3 | — | %0,3 | 10 Eki 2025 |
21İzleyin | CVE-2025-11190İstismar yok | The Kiwire Captive Portal contains an open redirection issue via the login-url parameter, allowing an attacker to redirect users to an attacsynchroweb · kiwire · CWE-59 | Orta5,4 | — | %0,3 | 10 Eki 2025 |
- CVE-2013-269031İzleyin
SQL injection vulnerability in index.php in Synchroweb Technology SynConnect 2.0 allows remote attackers to execute arbitrary SQL commands v
YüksekCVSS 7,5Kavram kanıtıEPSS %3synchroweb · synconnect28 Mar 2013
- CVE-2025-1118929İzleyin
The Kiwire Captive Portal contains a reflected cross-site scripting (XSS) vulnerability within the login-url parameter, allowing for Javascr
YüksekCVSS 7,3İstismar yokEPSS %0synchroweb · kiwire10 Eki 2025
- CVE-2025-1118829İzleyin
The Kiwire Captive Portal contains a blind SQL injection in the nas-id parameter, allowing for SQL commands to be issued and to compromise t
YüksekCVSS 7,3İstismar yokEPSS %0synchroweb · kiwire10 Eki 2025
- CVE-2025-1119021İzleyin
The Kiwire Captive Portal contains an open redirection issue via the login-url parameter, allowing an attacker to redirect users to an attac
OrtaCVSS 5,4İstismar yokEPSS %0synchroweb · kiwire10 Eki 2025