28 matches found
CVE-2025-3022: Improper Neutralization of Special Elements used in an OS Command
Os command injection vulnerability in e-solutions e-management. This vulnerability allows an attacker to execute arbitrary commands on the server via the ‘client’ parameter in the /data/apache/e-management/api/api3.php endpoint...
CVE-2024-50717
SQL injection vulnerability in Smart Agent v.1.1.0 allows a remote attacker to execute arbitrary code via the client parameter in the /recuperaLog.php component...
CVE-2024-50717: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Smart Agent v.1.1.0 allows a remote attacker to execute arbitrary code via the client parameter in the /recuperaLog.php component...
PT-2024-34400 · Unknown · Smart Agent
Name of the Vulnerable Software and Affected Versions: Smart Agent version 1.1.0 Description: The issue allows a remote attacker to execute arbitrary code via the client parameter in the "/recuperaLog.php" component. This is an SQL injection vulnerability. Recommendations: For Smart Agent version...
CVE-2024-50717
A SQL injection vulnerability exists in Smart Agent v.1.1.0 within the /recuperaLog.php component. A remote attacker can exploit the client parameter to achieve arbitrary code execution . As a temporary workaround, it is recommended to restrict access to the /recuperaLog.php component and avoid u...
Garage Management System 跨站脚本漏洞
Garage Management System Cms-Website is a garage management system that helps you manage all your vehicles, cars and motorcycles. A cross-site scripting vulnerability exists in Garage Management System v1.0, which stems from the lack of effective filtering and escaping of user-supplied data in th...
