116 matches found
PT-2021-10946
Name of the Vulnerable Software and Affected Versions: PHPPYUN versions prior to 5.0.1 Description: An information disclosure issue was found in the log file of the Alibaba payment interface, specifically in alipay function.php. This issue could allow attackers to obtain users' personally...
Alipay digital certificate assistant has dll hijacking vulnerability
Alipay Digital Certificate Assistant is an authentication program for Alipay to ensure the security of Alipay account funds. Alipay Digital Certificate Assistant has a dll hijacking vulnerability, which can be exploited by attackers to load a malicious dll and execute malicious code...
Alipay digital certificate assistant suffers from dll hijacking vulnerability (CNVD-2021-05506)
Alipay Digital Certificate Assistant is an authentication program for Alipay to ensure the security of Alipay account funds. Alipay Digital Certificate Assistant has a dll hijacking vulnerability, which can be exploited by attackers to load a malicious dll and execute malicious code...
XSS Vulnerability in Microsoft CMS
Micro Window CMS is a free and open source WeChat public number and Alipay service window management platform system. Micro Window CMS suffers from an XSS vulnerability, which originates from improper filtering of parameters passed into the system during registration. Attackers can use this...
Malicious Package in simple-alipay
Version 1.0.1 of simple-alipay contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 1.0.1 of this module is found installed you wi...
GHSA-3WH2-2PP3-2823 Malicious Package in simple-alipay
Version 1.0.1 of simple-alipay contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 1.0.1 of this module is found installed you wi...
PT-2020-20995
Name of the Vulnerable Software and Affected Versions simple-alipay version 1.0.1 Description The issue concerns malicious code in version 1.0.1 of the simple-alipay module. When executed in a browser, this code enumerates sensitive fields such as password, cvc, and cardnumber from forms and send...
Logic Flaw Vulnerability in Shop7 Online Shopping System Flagship Edition
Shop7 online shopping system flagship version is to support Alipay, WeChat payment and a variety of commonly used interfaces, computer version and cell phone version and APP seamless combination of data as a whole. Shop7 online shopping system flagship version of the existence of logical flaws in...
Malicious Package
Overview alipay-escrow is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using alipay-escrow...
Malicious Package
Overview alipay-dualfun is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using alipay-dualf...
(0Day) Alibaba Alipay URL Scheme Handling Vulnerability
This vulnerability allows local attackers to modify requests on affected installations of Alibaba Alipay. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of URL...
Sql injection
A SQL Injection was discovered in PHPSHE 1.7 in include/plugin/payment/alipay/pay.php with the parameter id. The vulnerability does not need any authentication...
CVE-2019-9762
A SQL Injection was discovered in PHPSHE 1.7 in include/plugin/payment/alipay/pay.php with the parameter id. The vulnerability does not need any authentication...
PHPSHE SQL Injection Vulnerability (CNVD-2019-12691)
Lingbao Jane Hao Network Technology PHPSHE is an online shopping mall system of China Lingbao Jane Hao Network Technology Company. The system supports express tracking, online chat, order evaluation and statistics and other functions. A SQL injection vulnerability exists in the...
PT-2019-19853
Name of the Vulnerable Software and Affected Versions PHPSHE version 1.7 Description A SQL Injection issue was found in the include/plugin/payment/alipay/pay.php file, specifically with the id parameter. This issue does not require any authentication to be exploited. Recommendations For PHPSHE...
CVE-2019-6805
SQL Injection was found in S-CMS version V3.0 via the alipay/alipayapi.php Oid parameter...
CVE-2019-6805
SQL Injection was found in S-CMS version V3.0 via the alipay/alipayapi.php Oid parameter...
CVE-2019-6805
CVE-2019-6805 is a SQL injection vulnerability in S-CMS v3.0, exploitable via the alipay/alipayapi.php O_id parameter. The issue allows partial to full disclosure/impact on confidentiality, integrity, and availability (per CVSS 2.0/3.0 vectors; base scores 7.5 and 9.8 respectively). The provided ...
PT-2019-18363
Name of the Vulnerable Software and Affected Versions S-CMS version V3.0 Description A SQL Injection issue was discovered in the software. The issue is related to the O id parameter in the "alipay/alipayapi.php" endpoint. Recommendations For S-CMS version V3.0, avoid using the O id parameter in t...
