CVE-2014-4543

Multiple cross-site scripting XSS vulnerabilities in payper/payper.php in the Pay Per Media Player plugin 1.24 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 fcolor, 2 links, 3 stitle, 4 height, 5 width, 6 host, 7 bcolor, 8 msg, 9 id, or 10 size...

CVE-2014-4543

The CVE-2014-4543 entry documents XSS vulnerabilities in the WordPress Pay Per Media Player plugin (payper/payper.php) version 1.24 and earlier. The root cause is unsanitized input across multiple parameters (fcolor, links, stitle, height, width, host, bcolor, msg, id, size) which allows remote a...

CVE-2014-4543: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in payper/payper.php in the Pay Per Media Player plugin 1.24 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 fcolor, 2 links, 3 stitle, 4 height, 5 width, 6 host, 7 bcolor, 8 msg, 9 id, or 10 size...

PT-2014-5966

Name of the Vulnerable Software and Affected Versions Pay Per Media Player plugin versions 1.24 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via various parameters, including fcolor, links, stitle, height, width, host, bcolor, msg, id, or size...

wordpress pay with tweet plugin <= 1.1 - Multiple Vulnerabilities

No description provided by source. Exploit Title: Wordpress Pay With Tweet plugin = 1.1 Multiple Vulnerabilities Date: 01/06/2012 Author: Gianluca Brindisi gATbrindi.si @gbrindisi http://brindi.si/g/ Software Link: http://downloads.wordpress.org/plugin/pay-with-tweet.1.1.zip Version: 1.1 1 Blind...

WHMCS Group Pay Plugin 1.5 (grouppay.php, hash param) - SQL Injection

No description provided by source. Tile: WHMCS grouppay plugin SQL Injection = 1.5 Author: HJauditing Employee Tim E-mail: [email protected] Web: http://hjauditing.com/ Plugin: http://kadeo.com.au/design-and-development/whmcs-dev/whmcs-modules/72-group-pay.html ============ Introduction...

Pay Per Minute Video Chat Script 2.0 & 2.1 - Multiple Vulnerabilities

No description provided by source. ? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe: suffer from multi XSS Vulnerability Vendor: payperviewvideosoftware.com ? Software : Pay Per Minute Video Chat Script V 2.1 - pR!CE : $269.00 USD. ? author: R3d-D3v!L ?...

Pay Per Watch & Bid Auktions System BLIND SQL Injection auktion.php (id_auk)

No description provided by source...

I-Pos Internet Pay Online Store <= 1.3 Beta SQL Injection Vulnerability

No description provided by source. + Title : I-Pos Internet Pay Online Store v1.3 Beta = Remote SQL Injection Vulnerability ========================================================================================== + Author : KnocKout + Special ThanX : Dr.Kacak & Cr@zy-King and CW ALL USERS . . ....

E-Pay RFI Vulnerability

No description provided by source...

Comrie Software Pay Roll Time Sheet & Punch Card Authentication Bypass

No description provided by source. Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Comriesoftware Pay Roll Time Sheet & Punch Card Authentication Bypass Vulnerability Version:1.0 Price:50$ Vendor url:http://www.comriesoftware.net/codewidgets/product.aspx?key=123 Published:...

Kwik Pay Payroll 4.10.3 - (.zip) DoS

No description provided by source. Exploit Title: Kwik Pay Payroll .zip DoS Date: April 1, 2010 Tested on: Windows XP SP3 Cost: 100.00 AU Author: anonymous Site: http://www.setfreesecurity.com File - Restore Database - Find Locate zip file Click the restore button at the bottom Program Crash, and...

Kwik Pay Payroll 4.10.3 - (.mdb) Crash PoC

No description provided by source. Exploit Title: Kwik Pay Payroll .mdb Crash PoC Date: April 1, 2010 Version: 4.10.3 Tested on: Windows XP SP3 Cost: 100.00 AU Author: anonymous Site: http://www.setfreesecurity.com Usage: Run Script, Open the program File - Import Payroll Data Select From Data...

JVN#80006084: Web Kyukincho vulnerable to cross-site scripting

Web Kyukincho provided by Intercom, Inc. is a software that digitizes and distributes a pay statement and others. Web Kyukincho contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed in the user's web browser. Solution Update the Software Update to the latest...

Threat Outbreak Alert: Fake Pay Slip Notification Email Messages on April 25, 2014.

Medium Alert ID: 33952 First Published: 2014 April 28 12:50 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a pay slip for the recipient. The text in the email message attempts to convince the recipient to open the...

Destoon Sql注入漏洞2（有条件）

简要描述： 过滤不严。 详细说明： 上次是alipay 这次来个paypal的。 当然 tenpay也有这洞 paypal 和 tenpay的一起说了。 api\pay\paypal\notify.php中 require '../../../common.inc.php'; $POST = $DPOST; if!$POST exit'fail'; $bank = 'paypal'; $PAY = cacheread'pay.php'; if!$PAY$bank'enable' exit'fail'; //得开启这种支付方式。 if!$PAY$bank'partnerid'...

08cms pay injection vulnerability-vulnerability warning-the black bar safety net

漏洞 也 include/paygate/alipay/pays.php Directly on the Exp /include/paygate/alipay/pays. php? outtradeno=2 2'%20AND%2 0SELECT%2 0 1%20FROMSELECT%20COUNT,CONCAT SELECT%20concat0x3a,mname,0x3a,password,0x3a,email,0x3a%20from%20cmsmembers %20limit%200,1,FLOORRAND02X%20FROM%20informationschema...

DGA Changer Malware Able to Modify Domain-Generation Seed on the Fly

Malware authors have been using domain-generation algorithms for a few years now, often in botnet-related malware that needs to stay one step ahead of takedown attempts and law enforcement agencies. Now, researchers have discovered that a strain of malware that may have been part of the attack in...

phpcms 9.4.2 /phpcms/modules/pay/respond.php 路径泄漏

No description provided by source...

CVE-2013-3536

SQL injection vulnerability in the gpLoadUserFromHash function in functionshash.php in the Group Pay module 1.5 and earlier for WHMCS allows remote attackers to execute arbitrary SQL commands via the hash parameter...