Cross site scripting

Accusoft PrizmDoc version 13.3 and earlier contains a Stored Cross-Site Scripting issue through a crafted PDF file...

CVE-2018-15546

Accusoft PrizmDoc version 13.3 and earlier contains a Stored Cross-Site Scripting issue through a crafted PDF file...

CVE-2018-15546

Accusoft PrizmDoc version 13.3 and earlier contains a Stored Cross-Site Scripting vulnerability triggered by a specially crafted PDF file. The issue affects PrizmDoc’s handling of PDFs, enabling injection of script/HTML that could be executed in a victim’s browser. Documented across CVE-2018-1554...

CVE-2016-9500

Accellion FTP server prior to version FTA912220 uses the Accusoft Prizm Content flash component, which contains multiple parameters customTabCategoryName, customButton1Image that are vulnerable to cross-site scripting...

Cross site scripting

Accellion FTP server prior to version FTA912220 uses the Accusoft Prizm Content flash component, which contains multiple parameters customTabCategoryName, customButton1Image that are vulnerable to cross-site scripting...

CVE-2016-9500 The Accellion FTP server prior to version FTA_9_12_220 is vulnerable to informaiton exposure

Accellion FTP server prior to version FTA912220 uses the Accusoft Prizm Content flash component, which contains multiple parameters customTabCategoryName, customButton1Image that are vulnerable to cross-site scripting...

forms.accusoft.com XSS vulnerability

Vulnerable URL: http://forms.accusoft.com/barcodemobiledownload.htm?email=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

Arbitrary File Upload and Code Execution in Accusoft Prizm Content Connect

In the course of our security assessment consulting we often find 0day vulnerabilities and report them to vendors. In this particular case the vendor has unfortunately shown a general disregard for the security risk of this uncovered vulnerability which was originally disclosed privately to them ...

CVE-2007-2209

Buffer overflow in igcore15d.dll 15.1.2.0 and 15.2.0.0 for AccuSoft ImageGear, as used in Corel Paint Shop Pro Photo 11.20 and possibly other products, allows user-assisted remote attackers to execute arbitrary code via a crafted .CLP file. NOTE: some details were obtained from third party source...

Buffer overflow

Buffer overflow in igcore15d.dll 15.1.2.0 and 15.2.0.0 for AccuSoft ImageGear, as used in Corel Paint Shop Pro Photo 11.20 and possibly other products, allows user-assisted remote attackers to execute arbitrary code via a crafted .CLP file. NOTE: some details were obtained from third party source...

CVE-2007-2209

Buffer overflow in igcore15d.dll 15.1.2.0 and 15.2.0.0 for AccuSoft ImageGear, as used in Corel Paint Shop Pro Photo 11.20 and possibly other products, allows user-assisted remote attackers to execute arbitrary code via a crafted .CLP file. NOTE: some details were obtained from third party source...

CVE-2007-2209

A concrete vulnerability described across multiple sources: Buffer overflow in igcore15d.dll versions 15.1.2.0 and 15.2.0.0 used by AccuSoft ImageGear, including Corel Paint Shop Pro Photo 11.20, may allow user-assisted remote code execution via a crafted .CLP file. The underlying issue is a buff...