CVE-2022-40840

ndk design NdkAdvancedCustomizationFields 3.5.0 is vulnerable to Cross Site Scripting XSS via createPdf.php...

NdkAdvancedCustomizationFields 跨站脚本漏洞

NdkAdvancedCustomizationFields is an advanced customization field from Ndk. A security vulnerability exists in NdkAdvancedCustomizationFields version 3.5.0, which stems from the vulnerability of createPdf.php to cross-site scripting XSS attacks...

CVE-2022-40840

ndk design NdkAdvancedCustomizationFields 3.5.0 is vulnerable to Cross Site Scripting XSS via createPdf.php...

CVE-2022-40839

A SQL injection vulnerability in the height and width parameter in NdkAdvancedCustomizationFields v3.5.0 allows unauthenticated attackers to exfiltrate database data...

Sql injection

A SQL injection vulnerability in the height and width parameter in NdkAdvancedCustomizationFields v3.5.0 allows unauthenticated attackers to exfiltrate database data...

CVE-2022-40839

CVE-2022-40839 is a SQL injection vulnerability in the height and width parameters of NdkAdvancedCustomizationFields v3.5.0. The issue allows unauthenticated remote attackers to exfiltrate database data. CVSSv3.1 base score 7.5 (HIGH) with Network attack vector, low attack complexity, no privileg...

CVE-2022-40839

A SQL injection vulnerability in the height and width parameter in NdkAdvancedCustomizationFields v3.5.0 allows unauthenticated attackers to exfiltrate database data...

CVE-2022-40839

A SQL injection vulnerability in the height and width parameter in NdkAdvancedCustomizationFields v3.5.0 allows unauthenticated attackers to exfiltrate database data...

PT-2022-25569 · Unknown · Ndkadvancedcustomizationfields

Name of the Vulnerable Software and Affected Versions: NdkAdvancedCustomizationFields version 3.5.0 Description: A SQL injection issue in the height and width parameters allows unauthenticated attackers to exfiltrate database data. Recommendations: For NdkAdvancedCustomizationFields version 3.5.0...