Code injection

The GloBee plugin before 1.1.2 for WooCommerce mishandles IPN messages...

CVE-2018-20782

The GloBee plugin before 1.1.2 for WooCommerce mishandles IPN messages...

CVE-2018-20782

The GloBee plugin before 1.1.2 for WooCommerce mishandles IPN messages...

CVE-2018-20782

The GloBee plugin before 1.1.2 for WooCommerce mishandles IPN messages...

CVE-2018-20782

The CVE-2018-20782 entry concerns the WordPress WooCommerce GloBee (cryptocurrency) Payment Gateway Plugin. Affects the plugin prior to version 1.1.2, where IPN (instant payment notification) handling is vulnerable. Root cause: IPN callback processing inadequately validates untrusted input and la...

Design/Logic Flaw

paypal-ipn before 3.0.0 uses the testipn parameter which is set by the PayPal IPN simulator to determine if it should use the production PayPal site or the sandbox. With a bit of time, an attacker could craft a request using the simulator that would fool any application which does not explicitly...

CVE-2014-10067

paypal-ipn before 3.0.0 uses the testipn parameter which is set by the PayPal IPN simulator to determine if it should use the production PayPal site or the sandbox. With a bit of time, an attacker could craft a request using the simulator that would fool any application which does not explicitly...

CVE-2014-10067

CVE-2014-10067 affects the paypal-ipn package up to version 2.x; a validation bypass exists due to the test_ipn parameter (set by the PayPal IPN simulator) that determines whether to use production or sandbox. An attacker could craft a request via the simulator to force sandbox mode, potentially ...

CVE-2014-10067

paypal-ipn before 3.0.0 uses the testipn parameter which is set by the PayPal IPN simulator to determine if it should use the production PayPal site or the sandbox. With a bit of time, an attacker could craft a request using the simulator that would fool any application which does not explicitly...

Design/Logic Flaw

A flaw was found in Moodle 3.4 to 3.4.1, 3.3 to 3.3.4, 3.2 to 3.2.7, 3.1 to 3.1.10 and earlier unsupported versions. Unauthenticated users can trigger custom messages to admin via paypal enrol script. Paypal IPN callback script should only send error emails to admin after request origin was...

CVE-2018-1081

A flaw was found in Moodle 3.4 to 3.4.1, 3.3 to 3.3.4, 3.2 to 3.2.7, 3.1 to 3.1.10 and earlier unsupported versions. Unauthenticated users can trigger custom messages to admin via paypal enrol script. Paypal IPN callback script should only send error emails to admin after request origin was...

CVE-2018-1081

A flaw was found in Moodle 3.4 to 3.4.1, 3.3 to 3.3.4, 3.2 to 3.2.7, 3.1 to 3.1.10 and earlier unsupported versions. Unauthenticated users can trigger custom messages to admin via paypal enrol script. Paypal IPN callback script should only send error emails to admin after request origin was...

CVE-2018-1081

A flaw was found in Moodle 3.4 to 3.4.1, 3.3 to 3.3.4, 3.2 to 3.2.7, 3.1 to 3.1.10 and earlier unsupported versions. Unauthenticated users can trigger custom messages to admin via paypal enrol script. Paypal IPN callback script should only send error emails to admin after request origin was...

CVE-2018-1081

A flaw was found in Moodle 3.4 to 3.4.1, 3.3 to 3.3.4, 3.2 to 3.2.7, 3.1 to 3.1.10 and earlier unsupported versions. Unauthenticated users can trigger custom messages to admin via paypal enrol script. Paypal IPN callback script should only send error emails to admin after request origin was...

CVE-2018-1081

A vulnerability (CVE-2018-1081) affects Moodle 3.4 to 3.4.1, 3.3 to 3.3.4, 3.2 to 3.2.7, 3.1 to 3.1.10 and earlier unsupported versions. Unauthenticated users can trigger custom messages to the admin via the PayPal Enrol script; the PayPal IPN callback script should only send error emails to the ...

PayPal IPN for DOCman by shopfiles.com,3.1,SQL Injection

PayPal IPN for DOCman by shopfiles.com, 3.1, SQL Injection...

Joomla PayPal IPN For Docman 3.1 SQL Injection

Exploit Title: Joomla! Component PayPal IPN for DOCman v3.1 - SQL Injection Google Dork: inurl:index.php?option=comdocmanpaypal Date: 20.02.2017 Vendor Homepage: http://shopfiles.com/ Software Buy:...

Joomla! Component PayPal IPN for DOCman 3.1 - id SQL Injection

Joomla! Component PayPal IPN for DOCman 3.1 - id SQL Injection Exploit Title: Joomla! Component PayPal IPN for DOCman v3.1 - SQL Injection Google Dork: inurl:index.php?option=comdocmanpaypal Date: 20.02.2017 Vendor Homepage: http://shopfiles.com/ Software Buy:...

inwentarz.ipn.gov.pl XSS vulnerability

Vulnerable URL: http://inwentarz.ipn.gov.pl/advancedSearch?q=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 5 VIP website status:| No...

Validation Bypass

Overview Versions 2.x.x and earlier of paypal-ipn are affected by a validation bypass vulnerability. paypal-ipn uses the testipn parameter which is set by the PayPal IPN simulator to determine if it should use the production PayPal site or the sandbox. A motivated attacker could craft a request...