Skip to content
OpenAdvisories

Vendor

HAMASTAR Technology

5 known vulnerabilities.

Products

MeetingHub Paperless Meetings 2 MeetingHub 2 WIMP 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2025-6169

    HAMASTAR Technology WIMP website co-construction management platform - SQL Injection

    The WIMP website co-construction management platform from HAMASTAR Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.

    HAMASTAR Technology WIMP
  • Critical 9.3
    CVE-2024-6118

    Hamastar MeetingHub Paperless Meetings - Plaintext Storage of a Password

    A Plaintext Storage of a Password vulnerability in ebooknote function in Hamastar MeetingHub Paperless Meetings 2021 allows remote attackers to obtain the other users’ credentials and gain access to the product via an XML file.

    HAMASTAR Technology MeetingHub Paperless Meetings
  • Critical 9.3
    CVE-2024-6117

    Hamastar MeetingHub Paperless Meetings - Unrestricted Upload of File with Dangerous Type

    A Unrestricted upload of file with dangerous type vulnerability in meeting management function in Hamastar MeetingHub Paperless Meetings 2021 allows remote authenticated users to perform arbitrary system commands via a crafted ASP file.

    HAMASTAR Technology MeetingHub Paperless Meetings