Smarts-srl vulnerabilities
We track 3 vulnerabilities in Smarts-srl products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on December 27, 2024.
3vulnerabilities
2critical
1high
0exploited
9.0average CVSS score
Latest Smarts-srl vulnerabilities
- 9.8 Critical severity
Smart Agent: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Smart Agent v.1.1.0 allows a remote attacker to execute arbitrary code via the client parameter in the /recuperaLog.php component.
- 9.8 Critical severity
Smart Agent: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Smart Agent v.1.1.0 allows a remote attacker to execute arbitrary code via the id parameter in the /sendPushManually.php component.
- 7.5 High severity
Smart Agent: Improper Control of Generation of Code
An issue in smarts-srl.com Smart Agent v.1.1.0 allows a remote attacker to obtain sensitive information via command injection through a vulnerable unsanitized parameter defined in the /youtubeInfo.php component.