HAMASTAR Technology vulnerabilities
We track 4 vulnerabilities in HAMASTAR Technology products across 3 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on January 22, 2026.
Latest HAMASTAR Technology vulnerabilities
- 7.5 High severity
MeetingHub: Absolute Path Traversal
MeetingHub developed by HAMASTAR Technology has an Arbitrary File Read vulnerability, allowing unauthenticated remote attackers to exploit Absolute Path Traversal to download arbitrary system files.
- 9.8 Critical severity
WIMP: Improper Neutralization of Special Elements used in an SQL Command
The WIMP website co-construction management platform from HAMASTAR Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.
- 9.1 Critical severity
MeetingHub Paperless Meetings: Insufficiently Protected Credentials
A Plaintext Storage of a Password vulnerability in ebooknote function in Hamastar MeetingHub Paperless Meetings 2021 allows remote attackers to obtain the other users’ credentials and gain access to the product via an XML file.
- 8.8 High severity
MeetingHub Paperless Meetings: Unrestricted Upload of File with Dangerous Type
A Unrestricted upload of file with dangerous type vulnerability in meeting management function in Hamastar MeetingHub Paperless Meetings 2021 allows remote authenticated users to perform arbitrary system commands via a crafted ASP file.