Smart Agent vulnerabilities

3 known vulnerabilities in Smart Agent from Smarts-srl. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Smart Agent: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-50717Dec 27, 2024Smarts-srl

  SQL injection vulnerability in Smart Agent v.1.1.0 allows a remote attacker to execute arbitrary code via the client parameter in the /recuperaLog.php component.

• 9.8 Critical severity

  Smart Agent: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-50716Dec 27, 2024Smarts-srl

  SQL injection vulnerability in Smart Agent v.1.1.0 allows a remote attacker to execute arbitrary code via the id parameter in the /sendPushManually.php component.

• 7.5 High severity

  Smart Agent: Improper Control of Generation of Code

  CVE-2024-50715Dec 27, 2024Smarts-srlEPSS 1.38%

  An issue in smarts-srl.com Smart Agent v.1.1.0 allows a remote attacker to obtain sensitive information via command injection through a vulnerable unsanitized parameter defined in the /youtubeInfo.php component.