WordPress Authorize.Net Payment Gateway For WooCommerce plugin < 5.1.27 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Authorize.Net Payment Gateway For WooCommerce plugin versions 5.1.27. Solution Update the WordPress Authorize.Net Payment Gateway For WooCommerce plugin to the latest available version at least 5.1.27...

Payment Terminal 3.1 - (Multiple) Cross-Site Scripting Vulnerability

Exploit Title: Payment Terminal 3.1 - 'Multiple' Cross-Site Scripting XSS Exploit Author: Vulnerability Lab Vendor Homepage: https://www.criticalgears.com/ Software Link: https://www.criticalgears.com/product/authorize-net-payment-terminal/...

Payment Terminal 2.x / 3.x Cross Site Scripting

Document Title: =============== Payment Terminal 2.x & v3.x - Multiple XSS Web Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2280 Release Date: ============= 2021-11-05 Vulnerability Laboratory ID VL-ID:...

Payment Terminal 2.x & v3.x - Multiple XSS Vulnerabilities

Document Title: =============== Payment Terminal 2.x & v3.x - Multiple XSS Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2280 Release Date: ============= 2021-11-05 Vulnerability Laboratory ID VL-ID: ===================================...

WordPress Event-Registration 5.43 Arbitrary File Upload

Exploit Title : WordPress Event-Registration Plugins 5.43 Arbitrary File Upload Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 30/03/2020 Vendor Homepage : wp-event-organiser.com Software Links : captainform.com/wordpress-event-registration-plugin/...

WordPress iThemes Exchange Authorize.net Add-on Cross-Site Scripting Vulnerability

iThemes Exchange for WordPress is a plugin for creating e-commerce sites using the WordPress content management system. authorize.net Add-on is one of the Authorize Payment Gateway plugins. A cross-site scripting vulnerability exists in WordPress iThemes Exchange Authorize.net Add-on. An attacker...

CVE-2015-9365

Authorize.net Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via addqueryarg and removequeryarg...

Design/Logic Flaw

Authorize.net Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9365

Authorize.net Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9365

The CVE-2015-9365 entry concerns the WordPress plugin component: Authorize.net Add-on for iThemes Exchange, affected on versions before 1.1.0. The vulnerability is a cross-site scripting (XSS) issue exploitable via add_query_arg() and remove_query_arg(), as described in multiple sources (NVD entr...

Magento Community Edition 2.x < 2.0.4 Multiple Vulnerabilities

Binary data 9693.prm...

Drupal Commerce Authorize.Net Module Access Bypass Vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community. commerce Authorize.Net is one of the e-commerce payment and billing system modules. An access bypass vulnerability exists in the Drupal Commerce Authorize.Net module versions prior to...

Commerce Authorize.Net SIM/DPM Payment Methods - Access Bypass - DRUPAL-SA-CONTRIB-2016-006

This module enables you to make credit card payments for Drupal Commerce orders via the Authorize.Net payment gateway using either their SIM hosted payment page or DPM direct post method mechanisms. The module doesn't sufficiently protect against the premature triggering of order completion witho...

authorize.net XSS vulnerability

Vulnerable URL: http://www.authorize.net/solutions/merchantsolutions/merchantservices/certifiedsolutiondirectory/?industryverticals=csivautomotive=random'%22%26%25prompt/XSSPOSED/...

authorize.net XSS vulnerability

Vulnerable URL: http://www.authorize.net/solutions/merchantsolutions/merchantservices/certifiedsolutiondirectory/?language=cspldotnet'%22%26%25prompt/XSSPOSED/...

authorize.net XSS vulnerability

Vulnerable URL: http://www.authorize.net/solutions/merchantsolutions/merchantservices/certifiedsolutiondirectory/?industryverticals=csivautomotive'"%26%25=random=Retail Details: Description| Value ---|--- Patched:| Yes, at 07.01.2016 Latest check for patch:| 07.01.2016 20:27 GMT Vulnerability...

SA-CONTRIB-2014-106 - Commerce Authorize.Net SIM/DPM Payment Methods - Access Bypass

This module provides payment methods for the Drupal Commerce package to permit the use of the Authorize.Net payment gateway's SIM and DPM payment protocols. Access Bypass The module doesn't sufficiently protect the Drupal Commerce order number passed to the Authorize.Net payment gateway, allowing...

CVE-2012-5807

The Authorize.Net eCheck module in Zen Cart does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

CVE-2012-5803

The Authorize.Net module in Ubercart does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

CVE-2012-5793

The Authorize.Net module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...