11 matches found
PromoBar by BestWebSoft < 1.1.1 - Cross-Site Scripting
The promobar plugin before 1.1.1 for WordPress has multiple XSS issues. id: CVE-2017-18529 info: name: PromoBar by BestWebSoft 1.1.1 - Cross-Site Scripting author: luisfelipe146 severity: medium description: | The promobar plugin before 1.1.1 for WordPress has multiple XSS issues. impact: |...
CVE-2017-18529
The promobar plugin before 1.1.1 for WordPress has multiple XSS issues...
CVE-2018-18529
ThinkPHP 3.2.4 has SQL Injection via the count parameter because the Library/Think/Db/Driver/Mysql.class.php parseKey function mishandles the key variable. NOTE: a backquote character is not required in the attack URI...
CVE-2022-42376
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2022-42376
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2022-42376
CVE-2022-42376 affects Tracker Software’s PDF-XChange Editor . The flaw resides in the parsing of U3D files , where crafted data can trigger a read past the end of an allocated buffer, enabling information disclosure. User interaction is required (open a malicious file/page). Exploitation could l...
CVE-2019-18529
This CVE entry is rejected/not used and does not represent an active vulnerability entry.
CVE-2017-18529
The CVE-2017-18529 entry concerns the WordPress promobar plugin (before 1.1.1) with multiple XSS issues. Nuclei and vendor data confirm affected software: promobar plugin for WordPress,
CVE-2018-18529
ThinkPHP 3.2.4 has SQL Injection via the count parameter because the Library/Think/Db/Driver/Mysql.class.php parseKey function mishandles the key variable. NOTE: a backquote character is not required in the attack URI...
CVE-2018-18529
ThinkPHP 3.2.4 is affected by an SQL injection in the count parameter due to the parseKey function in Library/Think/Db/Driver/Mysql.class.php mishandling the key variable. This is documented across multiple sources (NVD, Red Hat, GHSA, CNVD, osv) and consistently references the same root cause. T...