Description (CNA)
The Kiwire Captive Portal contains a blind SQL injection in the nas-id parameter, allowing for SQL commands to be issued and to compromise the corresponding database.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Synchroweb / Kiwire | affected 3.6 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.