Bpcbt vulnerabilities
We track 5 vulnerabilities in Bpcbt products across 3 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on September 21, 2022.
Latest Bpcbt vulnerabilities
- 9.8 Critical severity
Smartvista Front-end: Improper Neutralization of Special Elements used in an SQL Command
SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:j_id90 parameter at /SVFE2/pages/feegroups/mcc_group.jsf.
- 8.8 High severity
Smartvista: Improper Neutralization of Special Elements used in an SQL Command
SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:j_id88, UserForm:j_id90, and UserForm:j_id92 parameters at /SVFE2/pages/feegroups/country_group.jsf.
- 8.8 High severity
Smartvista: Improper Neutralization of Special Elements used in an SQL Command
SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the voiceAudit:j_id97 parameter at /SVFE2/pages/audit/voiceaudit.jsf.
- 8.8 High severity
Smartvista Front-end: Improper Neutralization of Special Elements used in an SQL Command
SmartVista SVFE2 v2.2.22 was discovered to contain multiple SQL injection vulnerabilities via the UserForm:j_id88, UserForm:j_id90, and UserForm:j_id92 parameters at /SVFE2/pages/feegroups/service_group.jsf.
- 7.5 High severity
Smartvista Cardgen: Improper Limitation of a Pathname to a Restricted Directory
An issue in the IGB Files and OutfileService features of SmartVista Cardgen v3.28.0 allows attackers to list and download arbitrary files via modifying the PATH parameter.