CVE-2018-14308

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2018-14308: Use After Free

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

PT-2018-12425

Name of the Vulnerable Software and Affected Versions Foxit Reader version 9.0.1.5096 Description This issue allows remote attackers to execute arbitrary code on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The flaw...

CVE-2016-6566

The valueAsString parameter inside the JSON payload contained by the ucLogintxtLoginIdClientStat POST parameter of the Sungard eTRAKiT3 software version 3.2.1.17 is not properly validated. An unauthenticated remote attacker may be able to modify the POST request and insert a SQL query which may...

CVE-2016-6566: Improper Neutralization of Special Elements used in an SQL Command

The valueAsString parameter inside the JSON payload contained by the ucLogintxtLoginIdClientStat POST parameter of the Sungard eTRAKiT3 software version 3.2.1.17 is not properly validated. An unauthenticated remote attacker may be able to modify the POST request and insert a SQL query which may...

PT-2018-4962

Name of the Vulnerable Software and Affected Versions Sungard eTRAKiT3 version 3.2.1.17 Description The issue concerns the valueAsString parameter within the JSON payload of the ucLogin txtLoginId ClientStat POST parameter, which is not properly validated. This could allow an unauthenticated remo...

Sungard eTRAKiT3 SQL Injection Vulnerability

SunGard's Financial Services division provides mission-critical software and technology services to organizations at all stages of their financial journey. Sungard eTRAKiT3 version 3.2.1.17 suffers from a SQL injection vulnerability due to the valueasstring parameter failing to adequately filter...