Total
4 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2024-50713 | 1 Smarts-srl | 1 Smart Agent | 2025-04-21 | N/A | 9.8 CRITICAL |
SmartAgent v1.1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tests/interface.php. | |||||
CVE-2024-50715 | 1 Smarts-srl | 1 Smart Agent | 2025-04-21 | N/A | 7.5 HIGH |
An issue in smarts-srl.com Smart Agent v.1.1.0 allows a remote attacker to obtain sensitive information via command injection through a vulnerable unsanitized parameter defined in the /youtubeInfo.php component. | |||||
CVE-2024-50716 | 1 Smarts-srl | 1 Smart Agent | 2025-04-21 | N/A | 9.8 CRITICAL |
SQL injection vulnerability in Smart Agent v.1.1.0 allows a remote attacker to execute arbitrary code via the id parameter in the /sendPushManually.php component. | |||||
CVE-2024-50717 | 1 Smarts-srl | 1 Smart Agent | 2025-04-18 | N/A | 9.8 CRITICAL |
SQL injection vulnerability in Smart Agent v.1.1.0 allows a remote attacker to execute arbitrary code via the client parameter in the /recuperaLog.php component. |