Grup Arge Energy and Control Systems SmartPower Energy Management System 跨站脚本漏洞

Grup Arge Energy and Control Systems SmartPower Energy Management System is a web-based system from Grup Arge Energy and Control Systems developed specifically to improve energy efficiency in organizations. A cross-site scripting vulnerability exists in Grup Arge Energy and Control Systems...

Grup Arge Energy and Control Systems SmartPower Energy Management System SQL注入漏洞

Grup Arge Energy and Control Systems SmartPower Energy Management System is a web-based system from Grup Arge Energy and Control Systems developed specifically to improve energy efficiency in organizations. A security vulnerability exists in Grup Arge Energy and Control Systems SmartPower Energy...

washingtonenergy.com Cross Site Scripting vulnerability OBB-3189071

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

APsystems Energy Communication Unit 操作系统命令注入漏洞

The APsystems Energy Communication Unit APsystems ECU-R is an energy communication unit from APsystems USA. An operating system command injection vulnerability exists in APSystems ECU-R version 5203. An attacker could exploit this vulnerability to execute arbitrary commands as root using the...

CVE-2022-4557

CVE-2022-4557 affects Smartpower Web (Group Arge Energy and Control Systems). The vulnerability is an SQL Injection caused by improper neutralization of special elements in SQL commands within Smartpower Web prior to version 23.01.01. Reported impact is high across confidentiality, integrity, and...

CVE-2022-4557 SQL Injection in Smartpower Web

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Group Arge Energy and Control Systems Smartpower Web allows SQL Injection. This issue affects Smartpower Web: before 23.01.01...

CVE-2022-4557 SQL Injection in Smartpower Web

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Group Arge Energy and Control Systems Smartpower Web allows SQL Injection. This issue affects Smartpower Web: before 23.01.01...

energy-reporters.com Cross Site Scripting vulnerability OBB-3187367

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-45091

CVE-2022-45091 affects Grup Arge Energy and Control Systems Smartpower Web; the issue is an improper neutralization of user input during web page generation, enabling Cross-site Scripting (XSS). Affected version is Smartpower Web before 23.01.01. Mitigation: upgrade to version 23.01.01 or later (...

CVE-2022-45091 Cross-site Scripting in Smartpower Web

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Group Arge Energy and Control Systems Smartpower Web allows Cross-Site Scripting XSS. This issue affects Smartpower Web: before 23.01.01...

CVE-2022-45091 Cross-site Scripting in Smartpower Web

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Group Arge Energy and Control Systems Smartpower Web allows Cross-Site Scripting XSS. This issue affects Smartpower Web: before 23.01.01...

CVE-2022-45090

The CVE-2022-45090 entry concerns an Improper Input Validation vulnerability in Group Arge Energy and Control Systems Smartpower Web, enabling SQL Injection. Multiple sources (Red Hat, NVD, CNNVD/CVE record) describe that Smartpower Web versions before 23.01.01 are affected due to insufficient in...

CVE-2022-45090 SQL Injection in Smartpower Web

Improper Input Validation vulnerability in Group Arge Energy and Control Systems Smartpower Web allows SQL Injection. This issue affects Smartpower Web: before 23.01.01...

CVE-2022-45089 SQL Injection in Smartpower Web

Improper Input Validation vulnerability in Group Arge Energy and Control Systems Smartpower Web allows SQL Injection. This issue affects Smartpower Web: before 23.01.01...

CVE-2022-45089

CVE-2022-45089 applies to Smartpower Web from Group Arge Energy and Control Systems, with versions prior to 23.01.01 vulnerable due to improper input validation that enables SQL Injection (high impact, network exposure). Mitigation: upgrade to 23.01.01 or later (per PT-2023-14597 and vendor advis...

CVE-2022-45089 SQL Injection in Smartpower Web

Improper Input Validation vulnerability in Group Arge Energy and Control Systems Smartpower Web allows SQL Injection. This issue affects Smartpower Web: before 23.01.01...

CVE-2022-45088

CVE-2022-45088 corresponds to an Improper Input Validation vulnerability in Smartpower Web by Group Arge Energy and Control Systems. Affected: Smartpower Web prior to version 23.01.01. Root cause: inadequate input validation enabling PHP Local File Inclusion. Impact as stated: potential exposure ...

CVE-2022-45088 Local File Inclusion in Smartpower Web

Improper Input Validation vulnerability in Group Arge Energy and Control Systems Smartpower Web allows PHP Local File Inclusion. This issue affects Smartpower Web: before 23.01.01...

CVE-2022-45088 Local File Inclusion in Smartpower Web

Improper Input Validation vulnerability in Group Arge Energy and Control Systems Smartpower Web allows PHP Local File Inclusion. This issue affects Smartpower Web: before 23.01.01...

CVE-2022-45087 Cross-site Scripting in Smartpower Web

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Group Arge Energy and Control Systems Smartpower Web allows Cross-Site Scripting XSS. This issue affects Smartpower Web: before 23.01.01...