Advisories · Technology

Kaifa Technology WebITR.

Every CVE that names Kaifa Technology WebITR among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-48395 CVE record

CVSS 6.5 Medium

Kaifa Technology WebITR - SQL Injection
- Kaifa Technology WebITR
- SQL injection
Not analysed yet 15 Dec 2023
CVE-2023-48394 CVE record

CVSS 8.8 High

Kaifa Technology WebITR - Arbitrary File Upload
- Kaifa Technology WebITR
- Unrestricted file upload
Not analysed yet 15 Dec 2023
CVE-2023-48393 CVE record

CVSS 4.3 Medium

Kaifa Technology WebITR - Error Message Leakage
- Kaifa Technology WebITR
- Information disclosure
Not analysed yet 15 Dec 2023
CVE-2023-48392 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Kaifa Technology WebITR - Hard-coded Cryptographic Key
- Kaifa Technology WebITR
- Hard-coded credentials
Not analysed yet 15 Dec 2023