44 matches found
CVE-2020-19450
SQL injection exists in the jdownloads 3.2.63 component for Joomla! via comjdownloads/helpers/jdownloadshelper.php, getUserLimits function in the list parameter...
speidel-shop.de Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1148047 Security Researcher ELProfesor Helped patch 2814 vulnerabilities Received 8 Coordinated Disclosure badges Received 107 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting speidel-shop.de websit...
CVE-2018-19450
A command injection can occur for specially crafted PDF files in Foxit Reader SDK ActiveX 5.4.0.1031 when parsing a launch action. An attacker can leverage this to gain remote code execution...
CVE-2018-19450
CVE-2018-19450 affects Foxit Reader SDK ActiveX: a command-injection bug occurs when parsing a Launch action in specially crafted PDF files, enabling remote code execution. Affected: Foxit Reader SDK ActiveX prior to 5.5.1 (e.g., 5.4.0.1031). Exploitation requires user interaction. Vendor guidanc...