Cylos
- Cyclos 4.14.7 - Dom-based Cross-Site Scripting in undefined enum (CVE-2021-31674)
- Cyclos 4.14.7 - Dom-based Cross-Site Scripting (CVE-2021-31673)
nopCommerce
- Open Redirect on nopCommerce 4.50.1
- Security issues in nopCommerce 4.50.1
SmartVista
- SmartVista Cardgen
  Reflected XSS in SmartVista Cardgen version 3.28.0 (CVE-2022-35554)
  Path traversal in SmartVista Cardgen version 3.28.0 (CVE-2022-38613)
  List all files in arbitrary folder in SmartVista Cardgen version 3.28.0 (CVE-2022-38614)
- SmartVista SVFE2
  SQL Injection in Service Group feature of SmartVista SVFE2 version 2.2.22 (CVE-2022-38615)
  SQL Injection in Terminal Tariff Group feature of SmartVista SVFE2 version 2.2.22 (CVE-2022-38616)
CraftCMS
- Server-Site Template Injection on CraftCMS 3.8.1

Powered by GitBook

On this page

SmartVista

Vendor Homepage: https://www.bpcbt.com/smartvista-solutions/

PreviousSecurity issues in nopCommerce 4.50.1 NextSmartVista Cardgen

Last updated 2 years ago