Kaifa Technology Webitr
4 CVEs affecting Kaifa Technology Webitr. Latest disclosed: 2023-12-15. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-48392 | Critical | 9.8 | 2023-12-15 | Kaifa Technology WebITR is an online attendance system, it has a vulnerability in using hard-coded encryption key. An unauthenticated remote attacker can gener… |
CVE-2023-48394 | High | 8.8 | 2023-12-15 | Kaifa Technology WebITR is an online attendance system, its file uploading function does not restrict upload of file with dangerous type. A remote attacker wit… |
CVE-2023-48395 | Medium | 6.5 | 2023-12-15 | Kaifa Technology WebITR is an online attendance system, it has insufficient validation for user input within a special function. A remote attacker with regular… |
CVE-2023-48393 | Medium | 4.3 | 2023-12-15 | Kaifa Technology WebITR is an online attendance system. A remote attacker with regular user privilege can obtain partial sensitive system information from erro… |