Information Server
Kwoksys · 2 CVEs
CVE-2022-45326
MEDIUM
An XML external entity (XXE) injection vulnerability in Kwoksys Kwok Information Server before v2.9.5.SP31 allows remot…
Dec 6, 2022
CVE-2013-5028
MEDIUM
SQL injection vulnerability in IT/hardware-list.dll in Kwoksys Kwok Information Server before 2.8.5 allows remote authe…
Oct 11, 2013
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2022-45326 | An XML external entity (XXE) injection vulnerability in Kwoksys Kwok Information Server before v2.9.5.SP31 allows remote authenticated users to conduct server-… | MEDIUM | 1.19% | Dec 6, 2022 |
| CVE-2013-5028 | SQL injection vulnerability in IT/hardware-list.dll in Kwoksys Kwok Information Server before 2.8.5 allows remote authenticated users to execute arbitrary SQL… | MEDIUM | 1.95% | Oct 11, 2013 |
Showing 1 to 2 of 2 CVEs