EUVD-2022-41193

Malicious code in bioql PyPI...

CVE-2022-38619: Improper Neutralization of Special Elements used in an SQL Command

SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:jid90 parameter at /SVFE2/pages/feegroups/mccgroup.jsf...

CVE-2022-38619

SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:jid90 parameter at /SVFE2/pages/feegroups/mccgroup.jsf...

CVE-2022-38618: Improper Neutralization of Special Elements used in an SQL Command

SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:jid88, UserForm:jid90, and UserForm:jid92 parameters at /SVFE2/pages/feegroups/countrygroup.jsf...

CVE-2022-38616: Improper Neutralization of Special Elements used in an SQL Command

SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:jid90 parameter at /feegroups/tgrtgroup.jsf...

CVE-2022-38615: Improper Neutralization of Special Elements used in an SQL Command

SmartVista SVFE2 v2.2.22 was discovered to contain multiple SQL injection vulnerabilities via the UserForm:jid88, UserForm:jid90, and UserForm:jid92 parameters at /SVFE2/pages/feegroups/servicegroup.jsf...