Vulnerabilidades do Synchroweb Kiwire
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Synchroweb Kiwire: 3 registro(s), com versões afetadas e correções.cpe:2.3:a:synchroweb:kiwire
CVE-2025-11190
Média · 5.4
CWE-59 10/10/2025
CVE-2025-11190
The Kiwire Captive Portal contains an open redirection issue via the login-url parameter, allowing an attacker to redirect users to an attacker controlled website.
CVE-2025-11189
Alta · 7.3
CWE-79 10/10/2025
CVE-2025-11189
The Kiwire Captive Portal contains a reflected cross-site scripting (XSS) vulnerability within the login-url parameter, allowing for Javascript execution.
CVE-2025-11188
Alta · 7.3
CWE-89 10/10/2025
CVE-2025-11188
The Kiwire Captive Portal contains a blind SQL injection in the nas-id parameter, allowing for SQL commands to be issued and to compromise the corresponding database.