Skip to content
OpenAdvisories

Vendor

Synchroweb

3 known vulnerabilities.

Products

Kiwire 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.3
    CVE-2025-11189

    CVE-2025-11189

    The Kiwire Captive Portal contains a reflected cross-site scripting (XSS) vulnerability within the login-url parameter, allowing for Javascript execution.

    Synchroweb Kiwire
  • High 7.3
    CVE-2025-11188

    CVE-2025-11188

    The Kiwire Captive Portal contains a blind SQL injection in the nas-id parameter, allowing for SQL commands to be issued and to compromise the corresponding database.

    Synchroweb Kiwire