Webitr Attendance System vulnerabilities

2 known vulnerabilities in Webitr Attendance System from Kaifa. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  WebITR: Unrestricted Upload of File with Dangerous Type

  CVE-2023-48394Dec 15, 2023Kaifa Technology

  Kaifa Technology WebITR is an online attendance system, its file uploading function does not restrict upload of file with dangerous type. A remote attacker with regular user privilege can exploit this vulnerability to upload arbitrary files to perform arbitrar

• 9.8 Critical severity

  WebITR: Use of Hard-coded Credentials

  CVE-2023-48392Dec 15, 2023Kaifa Technology

  Kaifa Technology WebITR is an online attendance system, it has a vulnerability in using hard-coded encryption key. An unauthenticated remote attacker can generate valid token parameter and exploit this vulnerability to access system with arbitrary user account