critical9.8
CVE-2023-28614
Freewill iFIS (aka SMART Trade) 20.01.01.04 allows OS Command Injection via shell metacharacters to a report page.
Impact
Freewill iFIS (aka SMART Trade) 20.01.01.04 allows OS Command Injection via shell metacharacters to a report page.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Freewillsolutions | Smart Trade | Version 20.01.01.04 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2023/MNDT-2023-0012.md
- https://www.freewillsolutions.com/smart-trade-ifis
- https://www.kb.cert.org/vuls/id/947701
- https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2023/MNDT-2023-0012.md
- https://www.freewillsolutions.com/smart-trade-ifis
- https://www.kb.cert.org/vuls/id/947701