Smarts-srl

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Smarts-srl records in CISA KEV

No Smarts-srl vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Smart Agent 4 records MEDIUM

Records

4 records

TI-2024-34107 CVE-2024-50717 · GHSA-g7cp-p6h8-7899

SQL injection vulnerability in Smart Agent v.1.1.0 allows a remote attacker to execute…

MEDIUM 51

SQL injection vulnerability in Smart Agent v.1.1.0 allows a remote attacker to execute arbitrary code via the client parameter in the /recuperaLog.php component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00885 Published 2024-12-27 No fix listed CWE-89

TI-2024-34106 CVE-2024-50716 · GHSA-hf9c-m775-fqh5

SQL injection vulnerability in Smart Agent v.1.1.0 allows a remote attacker to execute…

MEDIUM 51

SQL injection vulnerability in Smart Agent v.1.1.0 allows a remote attacker to execute arbitrary code via the id parameter in the /sendPushManually.php component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00885 Published 2024-12-27 No fix listed CWE-89

TI-2024-34103 CVE-2024-50713 · GHSA-74gf-m3p3-28x4

SmartAgent v1.1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tests/interface.php.

MEDIUM 50

SmartAgent v1.1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tests/interface.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00534 Published 2024-12-27 No fix listed CWE-89

TI-2024-34105 CVE-2024-50715 · GHSA-6xc9-xr94-5gvv

An issue in smarts-srl.com Smart Agent v.1.1.0 allows a remote attacker to obtain…

MEDIUM 42

An issue in smarts-srl.com Smart Agent v.1.1.0 allows a remote attacker to obtain sensitive information via command injection through a vulnerable unsanitized parameter defined in the /youtubeInfo.php component.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01382 Published 2024-12-27 No fix listed CWE-94

Open these records in search →

Critical	3
High	1
Medium	0
Low	0
No CVSS	0