CVE-2022-38618: Improper Neutralization of Special Elements used in an SQL Command

SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:jid88, UserForm:jid90, and UserForm:jid92 parameters at /SVFE2/pages/feegroups/countrygroup.jsf...

CVE-2022-38616

SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:jid90 parameter at /feegroups/tgrtgroup.jsf...

CVE-2022-38616

SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:jid90 parameter at /feegroups/tgrtgroup.jsf...

CVE-2022-38616

SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:jid90 parameter at /feegroups/tgrtgroup.jsf...

Sql injection

SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:jid90 parameter at /feegroups/tgrtgroup.jsf...

CVE-2022-38616

SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:jid90 parameter at /feegroups/tgrtgroup.jsf...

CVE-2022-38616

Summary: CVE-2022-38616 affects SmartVista SVFE2 2.2.22. The issue is a SQL injection via the UserForm:j_id90 parameter at the path /feegroups/tgrt_group.jsf. Impact per public description includes high risk to confidentiality, integrity, and availability (CVSS 3.1 base score 8.8). Root cause: SQ...

CVE-2022-38616: Improper Neutralization of Special Elements used in an SQL Command

SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:jid90 parameter at /feegroups/tgrtgroup.jsf...

SmartVista SVFE2 SQL注入漏洞

SmartVista SVFE2 is a subsystem of SmartVista, Inc. A security vulnerability exists in SmartVista SVFE2 version v2.2.22, which originates from the UserForm:jid90 parameter in /feegroups/tgrtgroup.jsf contains a SQL injection vulnerability...

PT-2022-24483 · Unknown · Smartvista Svfe2

Name of the Vulnerable Software and Affected Versions: SmartVista SVFE2 version 2.2.22 Description: The issue is a SQL injection vulnerability. It can be exploited via the UserForm:j id90 parameter at the "/feegroups/tgrt group.jsf" API endpoint. Recommendations: For SmartVista SVFE2 version...

CVE-2022-38615

SmartVista SVFE2 v2.2.22 was discovered to contain multiple SQL injection vulnerabilities via the UserForm:jid88, UserForm:jid90, and UserForm:jid92 parameters at /SVFE2/pages/feegroups/servicegroup.jsf...

CVE-2022-38615

SmartVista SVFE2 v2.2.22 was discovered to contain multiple SQL injection vulnerabilities via the UserForm:jid88, UserForm:jid90, and UserForm:jid92 parameters at /SVFE2/pages/feegroups/servicegroup.jsf...

Sql injection

SmartVista SVFE2 v2.2.22 was discovered to contain multiple SQL injection vulnerabilities via the UserForm:jid88, UserForm:jid90, and UserForm:jid92 parameters at /SVFE2/pages/feegroups/servicegroup.jsf...

CVE-2022-38615

SmartVista SVFE2 v2.2.22 was discovered to contain multiple SQL injection vulnerabilities via the UserForm:jid88, UserForm:jid90, and UserForm:jid92 parameters at /SVFE2/pages/feegroups/servicegroup.jsf...

CVE-2022-38615

SmartVista SVFE2 v2.2.22 is affected by multiple SQL injection vulnerabilities exploitable through the UserForm:j_id88, UserForm:j_id90, and UserForm:j_id92 parameters at /SVFE2/pages/feegroups/service_group.jsf. Affected component/issue: SQL injection in SVFE2 (endpoint path shown). CVSS v3.1 ba...

CVE-2022-38615: Improper Neutralization of Special Elements used in an SQL Command

SmartVista SVFE2 v2.2.22 was discovered to contain multiple SQL injection vulnerabilities via the UserForm:jid88, UserForm:jid90, and UserForm:jid92 parameters at /SVFE2/pages/feegroups/servicegroup.jsf...

PT-2022-24482 · Unknown · Smartvista Svfe2

Name of the Vulnerable Software and Affected Versions: SmartVista SVFE2 version 2.2.22 Description: The issue concerns multiple SQL injection vulnerabilities. These vulnerabilities can be exploited via the UserForm:j id88, UserForm:j id90, and UserForm:j id92 parameters at the...

CVE-2018-15206

BPC SmartVista 2 has CSRF via SVFE2/pages/admpages/roles/createrole.jsf...

Cross site request forgery (csrf)

BPC SmartVista 2 has CSRF via SVFE2/pages/admpages/roles/createrole.jsf...

CVE-2018-15206

CVE-2018-15206 affects BPC SmartVista 2 with a CSRF flaw exposed at SVFE2/pages/admpages/roles/createrole.jsf. CVSSv3 indicates HIGH impact (8.8) with network attack, low complexity, no privileges, but requires user interaction; confidentiality, integrity, and availability are rated HIGH. No reme...