CVE-2013-5028: Kwoksys Information Server

Medium severity, CVSS 6.5. EPSS: 1.9% chance of exploitation in the next 30 days.

SQL injection vulnerability in IT/hardware-list.dll in Kwoksys Kwok Information Server before 2.8.5 allows remote authenticated users to execute arbitrary SQL commands via the (1) hardwareType, (2) hardwareStatus, or (3) hardwareLocation parameter in a search command.

Affected products

• Kwoksys Information Server: up to and including 2.8.4; version 2.8.3 only

Published 2013-10-11. Last modified 2026-06-16.