high7.3
CVE-2025-11188
The Kiwire Captive Portal contains a blind SQL injection in the nas-id parameter, allowing for SQL commands to be issued and to compromise the corresponding da…
Impact
The Kiwire Captive Portal contains a blind SQL injection in the nas-id parameter, allowing for SQL commands to be issued and to compromise the corresponding database.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Synchroweb | Kiwire | Version 3.6 |