116 matches found
PT-2014-5944
Name of the Vulnerable Software and Affected Versions Alipay plugin versions 3.6.0 and earlier for WordPress Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is related to the getDebugInfo function. Recommendations For...
CVE-2014-4514: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in includes/apitenpay/inc.tenpaynotify.php in the Alipay plugin 3.6.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via vectors related to the getDebugInfo function...
CMSeasy SQL注入漏洞一发（bypass自身与360waf）
简要描述： 也不知道重复没有- -! 详细说明： /lib/default/archiveact.php： function respondaction includeonce ROOT . '/lib/plugins/pay/' . front::$get'code' . '.php'; $payclassname = front::$get'code'; $payobj = new $payclassname; $uri = $SERVER"REQUESTURI"; $uriget = strstr$uri, '?'; $uriget = strreplace'?', '',...
Trend Micro found the PayPal Android vulnerability-vulnerability warning-the black bar safety net
Recently, Trend Micro discovered the PayPal Android app has two vulnerabilities that may be attacker to conduct phishing（Phishing attacks to steal Alipay authentication information. The first vulnerability: an output component Activity Android app has several important components, one of which is...
WordPress Alipay Plugin <= 3.6.0 - XSS
Because of this vulnerability, the attackers can inject arbitrary web script or HTML via vectors related to the getDebugInfo function. Solution Update the plugin...
Alipay <= 3.6.0 'inc.tenpay_notify.php' Cross-Site Scripting (XSS)
The WordPress支付宝Alipay|财付通Tenpay|贝宝PayPal集成插件 WordPress plugin was affected by security vulnerability...
iOS end of the Alipay aeration unlock vulnerability wrong 5 times to unlock it-vulnerability warning-the black bar safety net
1 2 3 0 6 purchase train tickets available Alipay, Beijing 5 0 0 0 taxi available PayPal payment...... With PayPal increasingly wide range of applications, which frequently exposed the security risks are also a concern. Recently, the iOS end phone PayPal is aeration out there to unlock the...
PHPMyWind最新版SQL注入漏洞
简要描述： PHPMyWind最新版SQL注入 详细说明： 文件：/data/alipay/returnurl.php $alipayNotify = new AlipayNotify$alipayconfig; $verifyresult = $alipayNotify-verifyReturn; if$verifyresult //验证成功...
PHPMYWIND Sql Injection #2
简要描述： 过滤不严。 详细说明： PHPMyWind\data\alipay\notifyurl.php中 $alipayNotify = new AlipayNotify$alipayconfig; $verifyresult = $alipayNotify-verifyNotify; if$verifyresult //验证成功...
Maccms V8 Sql Injection #2
简要描述： 现在 V8版本 基本全部文件都有zend加密了。 只有那么少数的几个文件没加密。。 我就看看那几个把。。 详细说明： 在inc/user/alipay/notifyurl.php中 $alipayNotify = new AlipayNotify$alipayconfig; $verifyresult = $alipayNotify-verifyNotify; $verifyresult2 = $alipayNotify-verifyReturn; if$verifyresult //验证成功...
2 on 1 7-day Alipay the balance of treasure once again broke a major security vulnerability-vulnerability warning-the black bar safety net
Internet Security Alert on the platform a titled Taobao certification defects can login any Taobao account and Alipay me of the balance of treasure sprinkle of Vulnerability in one shot, one time each BBS, Weibo, wechat, QQ group to expand the fiery discussion, many people expressed concern about...
php cloud talent system UC API not initialized injection vulnerability-vulnerability warning-the black bar safety net
Detailed description: api/alipaydual/notifyurl.php requireonce"alipay.config.php"; requireonce"lib/alipaynotify.class.php"; requireoncedirnamedirnamedirnameFILE."/ data/db.config.php"; requireoncedirnamedirnamedirnameFILE."/ include/mysql.class.php"; $db = new mysql$dbconfig'dbhost',...
08cms pay injection vulnerability-vulnerability warning-the black bar safety net
漏洞 也 include/paygate/alipay/pays.php Directly on the Exp /include/paygate/alipay/pays. php? outtradeno=2 2'%20AND%2 0SELECT%2 0 1%20FROMSELECT%20COUNT,CONCAT SELECT%20concat0x3a,mname,0x3a,password,0x3a,email,0x3a%20from%20cmsmembers %20limit%200,1,FLOORRAND02X%20FROM%20informationschema...
08cms 4 /include/paygate/alipay/pays.php SQL注入漏洞
No description provided by source...
08cms SQL injection vulnerability analysis and the use of the EXP-bug warning-the black bar safety net
Car: /include/paygate/alipay/pays.php / Class name: alipaynotify Function: payment process Server Notification class Detailed: this page is to inform returning core processing the file, no need to modify Version: 3.1 Modify date: 2010-10-29 'Description: 'Following code just for the convenience o...
PHPMyWind CMS v4. 6. 3 Beta 0day-vulnerability warning-the black bar safety net
BUG-1: permission to bypass File location: goodsshow.php Problem code: 2 0 //Do not allow visitors under the single jump landing 2 1 ifempty$COOKIE'username' /just a simple determination of whether or not it is empty 2 2 2 3 header'location:member. php? c=login'; 2 4 exit; 2 5 2 6 Brief...
Alipay mobile client to skip the gesture password authentication method-vulnerability warning-the black bar safety net
PayPal this vulnerability can jump directly to the customer end of the gesture password validation, operation, ZTE U950, the MIUI V5 test feasible This is a gesture password Alipay client ! 1. First of all install and open ES file Explorer, just select a unrecognized type of file, such as here...
Taobao-Taobao guest black industry uncovered-vulnerability warning-the black bar safety net
See someone tan 9 piece free mp3, just try to search a bit, point into the cheapest, find out how selected no baby.。。。。 Try to select a bit。。。。 Found a lot of transparent pictures, click on after the jump to the days of the cat. In this case click Back, find back to PayPal. it. Multi-Station...
Taobao process design vulnerability, without the payment password to complete the payment transactions-vulnerability warning-the black bar safety net
Brief description: PayPal is the more secure an online payment tool, however, under certain conditions, you can bypass PayPal's digital certificate and payment password to make payments. Black produced with the means of stealing money, it can be Nisshin million gold. Detailed description: Alipay ...