Payment Form For Paypal Pro < 1.1.65 - Unauthenticated SQL Injection

The 'query' parameter allowed for any unauthenticated user to perform SQL queries with result output to a web page in JSON format. https://example.com/?cffaction=getdatafromdatabase&query=SELECT%20%20from%20wpposts...

Credit card skimmer masquerades as favicon

Malware authors are notorious for their deceptive attempts at staying one step ahead of defenders. As their schemes get exposed, they always need to go back to their bag of tricks to pull out a new one. When it comes to online credit card skimmers, we have already seen a number of evasion...

CVE-2015-7666

Multiple cross-site scripting XSS vulnerabilities in the 1 cpupdateMessageItem and 2 cpdeleteMessageItem functions in cppppadminintmessagelist.inc.php in the Payment Form for PayPal Pro plugin before 1.0.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the cal...

QIWI: [qiwi.com] XSS on payment form

Высылаем POST HACKED" В чем дело? Символы ", %BYTS фильтруются, но не фильтруется / символ Из за этого мы можем тупо закрыть скрипт при помощи и писать все, что угодно P.S. Можно забайпасить X-XSS-Auditor при помощи ваших обработок %00 и тп символов : Что в итоге выходит? F216159...

WordPress Payment Form for PayPal Pro Plugin <= 1.0.1 - XSS

This WordPress plugin is prone to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary script or HTML. Solution Update the plugin...

Payment Form for PayPal Pro <= 1.0.1 - Multiple Reflected Cross-Site Scripting (XSS)

The Payment Form for PayPal Pro WordPress plugin was affected by a Multiple Reflected Cross-Site Scripting XSS security vulnerability...

Threat Outbreak Alert: Fake Payment Form Attachment Email Messages on September 17, 2013

Medium Alert ID: 30836 First Published: 2013 September 17 17:32 GMT Version: 1 Summary Cisco Security has detected significant activity related to German-language spam email messages that claim to contain a payment form notification for the recipient. The text in the email message attempts to...

Threat Outbreak Alert: Fake German Payment Form Attachment Email Messages on June 25, 2014

Medium Alert ID: 30027 First Published: 2013 July 11 11:55 GMT Last Updated: 2014 June 26 11:57 GMT Version: 9 Summary Cisco Security has detected significant activity related to German-language spam email messages that claim to contain a payment form notification for the recipient. The text in t...

Threat Outbreak Alert: Fake Payment Form Attachment Email Messages on July 2, 2013

Medium Alert ID: 29803 First Published: 2013 June 26 17:25 GMT Last Updated: 2013 July 2 16:05 GMT Version: 2 Summary Cisco Security has detected significant activity related to German-language spam email messages that claim to contain a payment form notification for the recipient. The text in th...

Code injection

Unspecified vulnerability in the subscriptions manager in Invision Power Board IPB or IP.Board 2.3.1 before 20070912 allows remote authenticated users to change the member ID and reduce the privilege level of arbitrary users via a crafted payment form, related to 1 classgw2checkout.php, 2...

CVE-2007-4914

Unspecified vulnerability in the subscriptions manager in Invision Power Board IPB or IP.Board 2.3.1 before 20070912 allows remote authenticated users to change the member ID and reduce the privilege level of arbitrary users via a crafted payment form, related to 1 classgw2checkout.php, 2...

CVE-2007-4914

CVE-2007-4914 affects Invision Power Board (IPB/IP.Board) 2.3.1 prior to 20070912. The issue, described across multiple sources, is an unspecified vulnerability in the subscriptions manager that lets remote authenticated users change the member ID and thereby reduce the privilege level of arbitra...

CVE-2007-4914

Unspecified vulnerability in the subscriptions manager in Invision Power Board IPB or IP.Board 2.3.1 before 20070912 allows remote authenticated users to change the member ID and reduce the privilege level of arbitrary users via a crafted payment form, related to 1 classgw2checkout.php, 2...