CVE-2024-50715

An issue in smarts-srl.com Smart Agent v.1.1.0 allows a remote attacker to obtain sensitive information via command injection through a vulnerable unsanitized parameter defined in the /youtubeInfo.php component.
CVSS

No CVSS.

References
Link Resource
https://packetstorm.news/files/id/182451/ Third Party Advisory Exploit
https://smarts-srl.com Product
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:smarts-srl:smart_agent:1.1.0:*:*:*:pro:*:*:*
cpe:2.3:a:smarts-srl:smart_agent:1.1.0:*:*:*:qoe:*:*:*

History

21 Apr 2025, 15:18

Type Values Removed Values Added
First Time Smarts-srl smart Agent
Smarts-srl
References () https://packetstorm.news/files/id/182451/ - () https://packetstorm.news/files/id/182451/ - Third Party Advisory, Exploit
References () https://smarts-srl.com - () https://smarts-srl.com - Product
CPE cpe:2.3:a:smarts-srl:smart_agent:1.1.0:*:*:*:pro:*:*:*
cpe:2.3:a:smarts-srl:smart_agent:1.1.0:*:*:*:qoe:*:*:*

27 Dec 2024, 21:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-12-27 21:15

Updated : 2025-04-21 15:18


NVD link : CVE-2024-50715

Mitre link : CVE-2024-50715


JSON object : View

Products Affected

smarts-srl

  • smart_agent
CWE

No CWE.