PT-2023-14599 · Unknown · Smartpower Web

Name of the Vulnerable Software and Affected Versions: Smartpower Web versions prior to 23.01.01 Description: The issue is related to an Improper Input Validation vulnerability that allows SQL Injection in Smartpower Web. This vulnerability can be exploited due to the lack of proper validation of...

PT-2023-14593 · Unknown · Smartpower Web

Name of the Vulnerable Software and Affected Versions: Smartpower Web versions prior to 23.01.01 Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability. This vulnerability allows for Server Side Request Forgery. Recommendations: For versions prior to 23.01.01, updat...

PT-2023-14600 · Unknown · Smartpower Web

Name of the Vulnerable Software and Affected Versions: Smartpower Web versions prior to 23.01.01 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows an attacker to perform Cross-Site Scripting XSS...

PT-2023-14597 · Unknown · Smartpower Web

Name of the Vulnerable Software and Affected Versions: Smartpower Web versions prior to 23.01.01 Description: The issue is related to improper input validation, which allows SQL Injection in Smartpower Web. This can be exploited due to the lack of proper validation of user input. Recommendations:...

PT-2023-14594 · Group Arge Energy Control Systems · Smartpower Web

Name of the Vulnerable Software and Affected Versions: Smartpower Web versions prior to 23.01.01 Description: The issue affects Group Arge Energy and Control Systems Smartpower Web, allowing Cross-Site Scripting XSS due to improper neutralization of input during web page generation...