PT-2021-3761

Name of the Vulnerable Software and Affected Versions SourceCodester CASAP Automated Enrollment System version 1.0 Description The issue is related to a lack of protection for the SQL query structure, allowing remote attackers to execute arbitrary SQL statements. This can impact the...

CVE-2018-20985

The wp-payeezy-pay plugin before 2.98 for WordPress has local file inclusion in pay.php, donate.php, donate-rec, and pay-rec...

CVE-2018-20985

CVE-2018-20985 affects the WordPress plugin WP Payeezy Pay (before 2.98). Multiple sources confirm a local file inclusion (LFI) vulnerability in pay.php, donate.php, donate-rec, and pay-rec, caused by insufficient input verification. The NVD entry describes LFI with potential partial/full confide...

CVE-2018-20985

The wp-payeezy-pay plugin before 2.98 for WordPress has local file inclusion in pay.php, donate.php, donate-rec, and pay-rec...

PT-2019-10422

Name of the Vulnerable Software and Affected Versions wp-payeezy-pay plugin versions prior to 2.98 Description The issue concerns local file inclusion in certain files of the plugin, specifically pay.php, donate.php, donate-rec, and pay-rec. Recommendations For versions prior to 2.98, update to...

CVE-2018-20985: Improper Input Validation

The wp-payeezy-pay plugin before 2.98 for WordPress has local file inclusion in pay.php, donate.php, donate-rec, and pay-rec...

CVE-2019-9762

A SQL Injection was discovered in PHPSHE 1.7 in include/plugin/payment/alipay/pay.php with the parameter id. The vulnerability does not need any authentication...

CVE-2019-9762: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection was discovered in PHPSHE 1.7 in include/plugin/payment/alipay/pay.php with the parameter id. The vulnerability does not need any authentication...

PT-2019-19853

Name of the Vulnerable Software and Affected Versions PHPSHE version 1.7 Description A SQL Injection issue was found in the include/plugin/payment/alipay/pay.php file, specifically with the id parameter. This issue does not require any authentication to be exploited. Recommendations For PHPSHE...

tradeindiaresearch.com XSS vulnerability

Open Bug Bounty ID: OBB-509495 Description| Value ---|--- Affected Website:| tradeindiaresearch.com Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N...

forskolinlife.com XSS vulnerability

Open Bug Bounty ID: OBB-440081 Description| Value ---|--- Affected Website:| forskolinlife.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

a1000yoga.com XSS vulnerability

Open Bug Bounty ID: OBB-133793 Description| Value ---|--- Affected Website:| a1000yoga.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CSDJCMS系统 app/controllers/user/pay.php SQL注入漏洞

No description provided by source...

Doyo 2.3 /pay.php SQL注入漏洞

No description provided by source...

wordpress pay with tweet plugin <= 1.1 - Multiple Vulnerabilities

No description provided by source. Exploit Title: Wordpress Pay With Tweet plugin = 1.1 Multiple Vulnerabilities Date: 01/06/2012 Author: Gianluca Brindisi gATbrindi.si @gbrindisi http://brindi.si/g/ Software Link: http://downloads.wordpress.org/plugin/pay-with-tweet.1.1.zip Version: 1.1 1 Blind...

doyo 2.3 /pay.php SQL注入漏洞

pay.php 文件中的escape只是简单的对传入参数头尾加入单引号由于传入参数是序列化后再简单的escape，因此闭合escape单引号，序列化双引号后可引发注入. doyo 2.3...

CVE-2012-5349: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in pay.php in the Pay With Tweet plugin before 1.2 allow remote attackers to inject arbitrary web script or HTML via the 1 link, 2 title, or 3 dl parameter...

PT-2012-5944

Name of the Vulnerable Software and Affected Versions Pay With Tweet plugin versions prior to 1.2 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the link, title, or dl...

WordPress Plugin Pay with Tweet 1.1 - Multiple Vulnerabilities

WordPress Plugin Pay with Tweet 1.1 - Multiple Vulnerabilities Exploit Title: Wordpress Pay With Tweet plugin XSS After submitting the tweet: ?title=XSS&dl=REDIRECT-TO-URL%27"XSS The final download link will be replaced with REDIRECT-TO-URL POC:...