GCVE - cpe:2.3:a:smartertools:smartertrack:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:smartertools:smartertrack:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Smartertools (`5a59b173-735b-5182-b3c4-983b33290a1b`)
Product	Smartertrack (`34709433-9d6a-5aaf-b36f-d35ed07031e2`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-24387`	vulnerable	2026-06-08 05:41:00.235975	File upload and overwrite to app_data/Config in SmarterTrack v100.0.8019.14010 CRITICAL (9.1) With administrator or admin privileges the application can be tricked into overwriting files in app_data/Config folder, e.g. the systemsettings.xml file. THis is possible in SmarterTrack v100.0.8019.14010 Published: 2022-03-14T12:15:59.000Z Updated: 2026-05-05T21:08:45.102Z Open on db.gcve.eu Reference links https://csirt.divd.nl/DIVD-2021-00029 https://csirt.divd.nl/CVE-2022-24387/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-24386`	vulnerable	2026-06-08 05:41:00.235567	Stored XSS in SmarterTrack v100.0.8019.14010 HIGH (8.8) Stored XSS in SmarterTools SmarterTrack This issue affects: SmarterTools SmarterTrack 100.0.8019.14010. Published: 2022-03-14T00:00:00.000Z Updated: 2025-03-11T13:40:43.047Z Open on db.gcve.eu Reference links https://csirt.divd.nl/DIVD-2021-00029 https://csirt.divd.nl/CVE-2022-24386	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-24385`	vulnerable	2026-06-08 05:41:00.235230	Information disclosure via direct object access on SmarterTrack v100.0.8019.14010 MEDIUM (6.5) A Direct Object Access vulnerability in SmarterTools SmarterTrack leads to information disclosure This issue affects: SmarterTools SmarterTrack 100.0.8019.14010. Published: 2022-03-14T00:00:00.000Z Updated: 2025-03-11T13:40:44.472Z Open on db.gcve.eu Reference links https://csirt.divd.nl/DIVD-2021-00029 https://csirt.divd.nl/CVE-2022-24385	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-24384`	vulnerable	2026-06-08 05:41:00.234728	Reflective XSS on SmarterTrack v100.0.8019.14010 HIGH (8.8) Cross-site Scripting (XSS) vulnerability in SmarterTools SmarterTrack This issue affects: SmarterTools SmarterTrack 100.0.8019.14010. Published: 2022-03-14T00:00:00.000Z Updated: 2025-03-11T13:40:41.607Z Open on db.gcve.eu Reference links https://csirt.divd.nl/DIVD-2021-00029 https://csirt.divd.nl/CVE-2022-24384	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-4995`	vulnerable	2026-06-08 04:51:50.602736	Details available Cross-site scripting (XSS) vulnerability in frmTickets.aspx in SmarterTools SmarterTrack before 4.0.3504 allows remote attackers to inject arbitrary web script or HTML via the email address field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Published: 2010-08-25T19:00:00.000Z Updated: 2024-09-16T22:52:08.621Z Open on db.gcve.eu Reference links http://secunia.com/advisories/36172	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-4994`	vulnerable	2026-06-08 04:51:50.591100	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.