Kaifa WebITR Attendance System 2.1.0.23
Approved changes feed: RSS · Atom
cpe:2.3:a:kaifa:webitr_attendance_system:2.1.0.23:*:*:*:*:*:*:*part: a version: 2.1.0.23 update: *
| Vendor | Kaifa (dec2388e-ccb4-5d61-99d3-3c0d0a146c1b) |
|---|---|
| Product | Webitr Attendance System (c94c05ca-67c1-5e01-9530-f85fea016dae) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-48395 |
vulnerable | 2026-06-08 06:14:27.149543 |
Kaifa Technology WebITR - SQL Injection
MEDIUM (6.5)
Kaifa Technology WebITR is an online attendance system, it has insufficient validation for user input within a special function. A remote attacker with regular user privilege can exploit this vulnerability to inject arbitrary SQL commands to read database.
Published: 2023-12-15T09:27:22.243Z
Updated: 2025-05-21T14:25:53.216Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-48394 |
vulnerable | 2026-06-08 06:14:27.148920 |
Kaifa Technology WebITR - Arbitrary File Upload
HIGH (8.8)
Kaifa Technology WebITR is an online attendance system, its file uploading function does not restrict upload of file with dangerous type. A remote attacker with regular user privilege can exploit this vulnerability to upload arbitrary files to perform arbitrary command or disrupt service.
Published: 2023-12-15T09:25:18.105Z
Updated: 2024-08-02T21:30:34.805Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-48393 |
vulnerable | 2026-06-08 06:14:27.148618 |
Kaifa Technology WebITR - Error Message Leakage
MEDIUM (4.3)
Kaifa Technology WebITR is an online attendance system. A remote attacker with regular user privilege can obtain partial sensitive system information from error message.
Published: 2023-12-15T09:22:49.735Z
Updated: 2024-08-02T21:30:35.020Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-48392 |
vulnerable | 2026-06-08 06:14:27.148128 |
Kaifa Technology WebITR - Hard-coded Cryptographic Key
CRITICAL (9.8)
Kaifa Technology WebITR is an online attendance system, it has a vulnerability in using hard-coded encryption key. An unauthenticated remote attacker can generate valid token parameter and exploit this vulnerability to access system with arbitrary user account, including administrator’s account, to execute login account’s permissions, and obtain relevant information.
Published: 2023-12-15T09:20:19.843Z
Updated: 2024-10-14T03:39:11.463Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.