Skip to content
OpenAdvisories

Vendor

Kaifa Technology

4 known vulnerabilities.

Products

WebITR 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2023-48395

    Kaifa Technology WebITR - SQL Injection

    Kaifa Technology WebITR is an online attendance system, it has insufficient validation for user input within a special function. A remote attacker with regular user privilege can exploit this vulnerability to inject arbitrary SQL commands to read database.

    Kaifa Technology WebITR
  • Medium 4.3
    CVE-2023-48393

    Kaifa Technology WebITR - Error Message Leakage

    Kaifa Technology WebITR is an online attendance system. A remote attacker with regular user privilege can obtain partial sensitive system information from error message.

    Kaifa Technology WebITR