Synchroweb vulnerabilities
We track 2 vulnerabilities in Synchroweb products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 10, 2025.
2vulnerabilities
0critical
2high
0exploited
7.3average CVSS score
Latest Synchroweb vulnerabilities
- 7.3 High severity
Kiwire: Improper Neutralization of Input During Web Page Generation
The Kiwire Captive Portal contains a reflected cross-site scripting (XSS) vulnerability within the login-url parameter, allowing for Javascript execution.
- 7.3 High severity
Kiwire: Improper Neutralization of Special Elements used in an SQL Command
The Kiwire Captive Portal contains a blind SQL injection in the nas-id parameter, allowing for SQL commands to be issued and to compromise the corresponding database.