34 matches found
CVE-2022-38619
SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:jid90 parameter at /SVFE2/pages/feegroups/mccgroup.jsf...
EUVD-2022-41192
Malicious code in bioql PyPI...
EUVD-2022-41195
Malicious code in bioql PyPI...
EUVD-2022-41196
Malicious code in bioql PyPI...
CVE-2022-38618
SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:jid88, UserForm:jid90, and UserForm:jid92 parameters at /SVFE2/pages/feegroups/countrygroup.jsf...
CVE-2022-38619
SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:jid90 parameter at /SVFE2/pages/feegroups/mccgroup.jsf...
Sql injection
SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:jid90 parameter at /SVFE2/pages/feegroups/mccgroup.jsf...
CVE-2022-38619
CVE-2022-38619 affects SmartVista SVFE2 v2.2.22. A SQL injection is exploitable via the UserForm:j_id90 parameter at /SVFE2/pages/feegroups/mcc_group.jsf. The CVE documents indicate high impact on confidentiality, integrity, and availability (CVSS v3.1: 9.8; attack vector NETWORK, complexity LOW,...
CVE-2022-38619
SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:jid90 parameter at /SVFE2/pages/feegroups/mccgroup.jsf...
CVE-2022-38618
SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:jid88, UserForm:jid90, and UserForm:jid92 parameters at /SVFE2/pages/feegroups/countrygroup.jsf...
Sql injection
SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:jid88, UserForm:jid90, and UserForm:jid92 parameters at /SVFE2/pages/feegroups/countrygroup.jsf...
CVE-2022-38618
SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:jid88, UserForm:jid90, and UserForm:jid92 parameters at /SVFE2/pages/feegroups/countrygroup.jsf...
CVE-2022-38618
CVE-2022-38618 affects SmartVista SVFE2 v2.2.22. A SQL injection vulnerability exists in the web endpoint “/SVFE2/pages/feegroups/country_group.jsf” via the parameters UserForm:j_id88, UserForm:j_id90, and UserForm:j_id92. The issue was described as enabling SQL injection, with the affected compo...
CVE-2022-38616
SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:jid90 parameter at /feegroups/tgrtgroup.jsf...
CVE-2022-38616
SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:jid90 parameter at /feegroups/tgrtgroup.jsf...
Sql injection
SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:jid90 parameter at /feegroups/tgrtgroup.jsf...
CVE-2022-38616
Summary: CVE-2022-38616 affects SmartVista SVFE2 2.2.22. The issue is a SQL injection via the UserForm:j_id90 parameter at the path /feegroups/tgrt_group.jsf. Impact per public description includes high risk to confidentiality, integrity, and availability (CVSS 3.1 base score 8.8). Root cause: SQ...
PT-2022-24483 · Unknown · Smartvista Svfe2
Name of the Vulnerable Software and Affected Versions: SmartVista SVFE2 version 2.2.22 Description: The issue is a SQL injection vulnerability. It can be exploited via the UserForm:j id90 parameter at the "/feegroups/tgrt group.jsf" API endpoint. Recommendations: For SmartVista SVFE2 version...
CVE-2022-38615
SmartVista SVFE2 v2.2.22 was discovered to contain multiple SQL injection vulnerabilities via the UserForm:jid88, UserForm:jid90, and UserForm:jid92 parameters at /SVFE2/pages/feegroups/servicegroup.jsf...
Sql injection
SmartVista SVFE2 v2.2.22 was discovered to contain multiple SQL injection vulnerabilities via the UserForm:jid88, UserForm:jid90, and UserForm:jid92 parameters at /SVFE2/pages/feegroups/servicegroup.jsf...