Knowband vulnerabilities
We track 2 vulnerabilities in Knowband products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 19, 2024.
2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score
Latest Knowband vulnerabilities
- 9.8 Critical severity
spinwheel: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in KnowBand spinwheel v.3.0.3 and before allows a remote attacker to gain escalated privileges and obtain sensitive information via the SpinWheelFrameSpinWheelModuleFrontController::sendEmail() method.
- 9.8 Critical severity
One Page Checkout, Social Login & Mailchimp: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in KnowBand Module One Page Checkout, Social Login & Mailchimp (supercheckout) v.8.0.3 and before allows a remote attacker to execute arbitrary code via a crafted request to the updateCheckoutBehaviour function in the supercheckout.