40 matches found
CVE-2018-13792
Multiple SQL injection vulnerabilities in the monitoring feature in the HTTP API in ABBYY FlexiCapture before 12 Release 2 allow an attacker to execute arbitrary SQL commands via the mask, sortOrder, filter, or Order parameter...
Sql injection
Multiple SQL injection vulnerabilities in the monitoring feature in the HTTP API in ABBYY FlexiCapture before 12 Release 2 allow an attacker to execute arbitrary SQL commands via the mask, sortOrder, filter, or Order parameter...
CVE-2018-13792
Multiple SQL injection vulnerabilities in the monitoring feature in the HTTP API in ABBYY FlexiCapture before 12 Release 2 allow an attacker to execute arbitrary SQL commands via the mask, sortOrder, filter, or Order parameter...
CVE-2018-13792
Technical details such as affected versions, root cause, and remediation are not publicly provided in the supplied documents. Monitor for updates.
CVE-2018-13792: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in the monitoring feature in the HTTP API in ABBYY FlexiCapture before 12 Release 2 allow an attacker to execute arbitrary SQL commands via the mask, sortOrder, filter, or Order parameter...
Design/Logic Flaw
The HTTP API in ABBYY FlexiCapture before 12 Release 1 Update 7 allows an attacker to conduct Access Control attacks via the /FlexiCapture12/Login/Server/SevaUserProfile FlexiCaptureTmsSts2 parameter...
CVE-2018-13793
Multiple Cross Site Request Forgery CSRF vulnerabilities in the HTTP API in ABBYY FlexiCapture before 12 Release 1 Update 7 exist in Web Verification, Web Scanning, Web Capture, Monitoring and Administration, and Login...
CVE-2018-13793
Multiple Cross Site Request Forgery CSRF vulnerabilities in the HTTP API in ABBYY FlexiCapture before 12 Release 1 Update 7 exist in Web Verification, Web Scanning, Web Capture, Monitoring and Administration, and Login...
Cross site request forgery (csrf)
Multiple Cross Site Request Forgery CSRF vulnerabilities in the HTTP API in ABBYY FlexiCapture before 12 Release 1 Update 7 exist in Web Verification, Web Scanning, Web Capture, Monitoring and Administration, and Login...
CVE-2018-13791
The HTTP API in ABBYY FlexiCapture before 12 Release 1 Update 7 allows an attacker to conduct Access Control attacks via the /FlexiCapture12/Login/Server/SevaUserProfile FlexiCaptureTmsSts2 parameter...
CVE-2018-13791
CVE-2018-13791 affects ABBYY FlexiCapture before 12 Release 1 Update 7. The HTTP API vulnerability enables access control bypass through the /FlexiCapture12/Login/Server/SevaUserProfile FlexiCaptureTmsSts2 parameter, exposing partial to high-impact consequences per the provided CVSS data (network...
CVE-2018-13793
Multiple Cross Site Request Forgery CSRF vulnerabilities in the HTTP API in ABBYY FlexiCapture before 12 Release 1 Update 7 exist in Web Verification, Web Scanning, Web Capture, Monitoring and Administration, and Login...
CVE-2018-13791
The HTTP API in ABBYY FlexiCapture before 12 Release 1 Update 7 allows an attacker to conduct Access Control attacks via the /FlexiCapture12/Login/Server/SevaUserProfile FlexiCaptureTmsSts2 parameter...
CVE-2018-13793
CVE-2018-13793 concerns ABBYY FlexiCapture’s HTTP API with multiple CSRF vulnerabilities affecting Web Verification, Web Scanning, Web Capture, Monitoring and Administration, and Login prior to 12 Release 1 Update 7. The affected surface is the HTTP API in the mentioned modules; exploitation deta...
CVE-2018-13791: Incorrect Permission Assignment for Critical Resource
The HTTP API in ABBYY FlexiCapture before 12 Release 1 Update 7 allows an attacker to conduct Access Control attacks via the /FlexiCapture12/Login/Server/SevaUserProfile FlexiCaptureTmsSts2 parameter...
CVE-2018-13793: Cross-Site Request Forgery (CSRF)
Multiple Cross Site Request Forgery CSRF vulnerabilities in the HTTP API in ABBYY FlexiCapture before 12 Release 1 Update 7 exist in Web Verification, Web Scanning, Web Capture, Monitoring and Administration, and Login...
ABBYY PDF Transformer+ dll Hijacking Vulnerability
ABBYY PDF Transformer+ is a pdf format converter from ABBYY. ABBYY PDF Transformer+'s Transformer.exe component has a dll hijacking vulnerability, due to insecure loading of library files, an attacker can construct a malicious application and place it in a specific path, which allows the...
registration.abbyy.com XSS vulnerability
Vulnerable URL: http://registration.abbyy.com/?lang="// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check registration.abbyy.com...
france.abbyy.com XSS vulnerability
Vulnerable URL: http://france.abbyy.com/finereader/prettyPhotoxss/2,/ Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 22:44 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google...
registration.abbyy.ru XSS vulnerability
Open Bug Bounty ID: OBB-53171 Description| Value ---|--- Affected Website:| registration.abbyy.ru Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...