CVE-2018-13792 | BDVDB-2026-112660 Detail

Description#

Multiple SQL injection vulnerabilities in the monitoring feature in the HTTP API in ABBYY FlexiCapture before 12 Release 2 allow an attacker to execute arbitrary SQL commands via the mask, sortOrder, filter, or Order parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.abbyydownloads.com/fc12/ReleaseNotes_FC12_R2_U6_1299.29_build_12.0.2.1420.pdf

Exploit#

No public exploit known

History#

Version 12019-02-10Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.