CVE-2022-38614

An issue in the IGB Files and OutfileService features of SmartVista Cardgen v3.28.0 allows attackers to list and download arbitrary files via modifying the PATH parameter...

CVE-2022-38615

SmartVista SVFE2 v2.2.22 was discovered to contain multiple SQL injection vulnerabilities via the UserForm:jid88, UserForm:jid90, and UserForm:jid92 parameters at /SVFE2/pages/feegroups/servicegroup.jsf...

Sql injection

SmartVista SVFE2 v2.2.22 was discovered to contain multiple SQL injection vulnerabilities via the UserForm:jid88, UserForm:jid90, and UserForm:jid92 parameters at /SVFE2/pages/feegroups/servicegroup.jsf...

Design/Logic Flaw

An issue in the IGB Files and OutfileService features of SmartVista Cardgen v3.28.0 allows attackers to list and download arbitrary files via modifying the PATH parameter...

CVE-2022-38614

CVE-2022-38614 affects SmartVista Cardgen v3.28.0, specifically the IGB Files and OutfileService features. The issue allows attackers to list and download arbitrary files by modifying the PATH parameter. Public sources across NVD/Red Hat/CVE records confirm the exposed component and impact, with ...

CVE-2022-38614

An issue in the IGB Files and OutfileService features of SmartVista Cardgen v3.28.0 allows attackers to list and download arbitrary files via modifying the PATH parameter...

CVE-2022-38615

SmartVista SVFE2 v2.2.22 was discovered to contain multiple SQL injection vulnerabilities via the UserForm:jid88, UserForm:jid90, and UserForm:jid92 parameters at /SVFE2/pages/feegroups/servicegroup.jsf...

CVE-2022-38615

SmartVista SVFE2 v2.2.22 is affected by multiple SQL injection vulnerabilities exploitable through the UserForm:j_id88, UserForm:j_id90, and UserForm:j_id92 parameters at /SVFE2/pages/feegroups/service_group.jsf. Affected component/issue: SQL injection in SVFE2 (endpoint path shown). CVSS v3.1 ba...

CVE-2022-38613

A Path Traversal vulnerability in SmartVista Cardgen v3.28.0 allows authenticated attackers to read arbitrary files in the system...

CVE-2022-38613

A Path Traversal vulnerability in SmartVista Cardgen v3.28.0 allows authenticated attackers to read arbitrary files in the system...

CVE-2022-38613

A Path Traversal vulnerability in SmartVista Cardgen v3.28.0 allows authenticated attackers to read arbitrary files in the system...

Path traversal

A Path Traversal vulnerability in SmartVista Cardgen v3.28.0 allows authenticated attackers to read arbitrary files in the system...

CVE-2022-38613

CVE-2022-38613 affects SmartVista Cardgen, specifically version 3.28.0. The issue is a path traversal vulnerability that allows authenticated attackers to read arbitrary files on the system. Documented metrics show CVSS v3.1 base score 6.5 (Medium) with network attack vector, low attack complexit...

CVE-2022-38613

A Path Traversal vulnerability in SmartVista Cardgen v3.28.0 allows authenticated attackers to read arbitrary files in the system...

PT-2022-24480 · Unknown · Smartvista Cardgen

Name of the Vulnerable Software and Affected Versions: SmartVista Cardgen version 3.28.0 Description: A Path Traversal issue allows authenticated attackers to read arbitrary files in the system. Recommendations: For SmartVista Cardgen version 3.28.0, consider restricting access to sensitive files...

SmartVista Cardgen 路径遍历漏洞

SmartVista Cardgen is a complete subsystem for magnetic and smart chip EMV card personalization from SmartVista. A security vulnerability exists in SmartVista Cardgen version v3.28.0, which stems from a path traversal vulnerability that allows an authenticated attacker to read arbitrary files on...

PT-2022-24482 · Unknown · Smartvista Svfe2

Name of the Vulnerable Software and Affected Versions: SmartVista SVFE2 version 2.2.22 Description: The issue concerns multiple SQL injection vulnerabilities. These vulnerabilities can be exploited via the UserForm:j id88, UserForm:j id90, and UserForm:j id92 parameters at the...

SmartVista SVFE2 SQL注入漏洞

SmartVista SVFE2 is a subsystem of SmartVista, Inc. A security vulnerability exists in SmartVista SVFE2 version v2.2.22, which originates via the UserForm:jid88, UserForm:jid90, and UserForm:jid92 parameters in /SVFE2/pages/feegroups/servicegroup.jsf contain multiple SQL injection vulnerabilities...

PT-2022-24481 · Unknown · Smartvista Cardgen

Name of the Vulnerable Software and Affected Versions: SmartVista Cardgen version 3.28.0 Description: The issue affects the IGB Files and OutfileService features, allowing attackers to list and download arbitrary files by modifying the PATH parameter. Recommendations: For SmartVista Cardgen versi...

SmartVista Cardgen 路径遍历漏洞

SmartVista Cardgen is a complete subsystem for magnetic and smart chip EMV card personalization from SmartVista. A security vulnerability exists in SmartVista Cardgen version v3.28.0, which stems from a problem with the IGB file and OutfileService functionality that allows an attacker to list and...