17 matches found
CVE-2020-28415
CVE-2020-28415 提案された説明 TranzWare Payment Gateway 3.1.12.3.2 には、反映型クロスサイトスクリプティング（XSS）の脆弱性が存在します。リモートの未認証の攻撃者は、細工された URL を介して任意の HTML コードを実行することが可能です（CVE-2020-28414 とは異なるベクトル）。 脆弱性タイプ クロスサイトスクリプティング（XSS） 製品ベンダー TranzWare 影響を受ける製品コードベース Payment Gateway 3.1.12.3.2 攻撃タイプ リモート コード実行の影響 true...
CVE-2020-28414
CVE-2020-28414 建议描述 TranzWare Payment Gateway 3.1.12.3.2 存在一个反射型跨站脚本（XSS）漏洞。远程未认证攻击者可通过精心构造的 URL 执行任意 HTML 代码。 漏洞类型 跨站脚本（XSS） 供应商产品 TranzWare 受影响产品代码库 Payment Gateway 3.1.12.3.2 攻击类型 远程 影响代码执行 是 供应商是否已确认或承认该漏洞？ 是 参考 https://compassplus.com/solutions/tranzware/ 发现者 Vladimir Rotanov（Jet Infosystems...
CVE-2021-28110
/exec in TranzWare e-Commerce Payment Gateway TWEC PG before 3.1.27.5 had a vulnerability in its XML parser...
EUVD-2020-20874
Malware in sbrugna...
EUVD-2020-20873
Malware in sbrugna...
CVE-2020-28414
A reflected cross-site scripting XSS vulnerability exists in the TranzWare Payment Gateway 3.1.12.3.2. A remote unauthenticated attacker is able to execute arbitrary HTML code via crafted url different vector than CVE-2020-28415...
CVE-2020-28415
A reflected cross-site scripting XSS vulnerability exists in the TranzWare Payment Gateway 3.1.12.3.2. A remote unauthenticated attacker is able to execute arbitrary HTML code via crafted url different vector than CVE-2020-28414...
CVE-2020-28414
A reflected cross-site scripting XSS vulnerability exists in the TranzWare Payment Gateway 3.1.12.3.2. A remote unauthenticated attacker is able to execute arbitrary HTML code via crafted url different vector than CVE-2020-28415...
Cross site scripting
A reflected cross-site scripting XSS vulnerability exists in the TranzWare Payment Gateway 3.1.12.3.2. A remote unauthenticated attacker is able to execute arbitrary HTML code via crafted url different vector than CVE-2020-28414...
CVE-2020-28414
CVE-2020-28414 describes a reflected XSS in Compassplus TranzWare Payment Gateway 3.1.12.3.2. A remote unauthenticated attacker can trigger arbitrary HTML code via a crafted URL, as per the NVD entry. Connected records also associate a related CVE-2020-28415. The root cause and exact exploit deta...
CVE-2020-28414
A reflected cross-site scripting XSS vulnerability exists in the TranzWare Payment Gateway 3.1.12.3.2. A remote unauthenticated attacker is able to execute arbitrary HTML code via crafted url different vector than CVE-2020-28415...
CVE-2020-28415
CVE-2020-28415 describes a reflected cross-site scripting (XSS) vulnerability in TranzWare Payment Gateway 3.1.12.3.2. Multiple connected sources (e.g., CNVD entries) indicate an attack vector where a crafted URL can cause the application to output arbitrary HTML, enabling an attacker to potentia...
CVE-2020-28415
A reflected cross-site scripting XSS vulnerability exists in the TranzWare Payment Gateway 3.1.12.3.2. A remote unauthenticated attacker is able to execute arbitrary HTML code via crafted url different vector than CVE-2020-28414...
CVE-2020-28415: Improper Neutralization of Input During Web Page Generation
A reflected cross-site scripting XSS vulnerability exists in the TranzWare Payment Gateway 3.1.12.3.2. A remote unauthenticated attacker is able to execute arbitrary HTML code via crafted url different vector than CVE-2020-28414...
PT-2020-17007
Name of the Vulnerable Software and Affected Versions TranzWare Payment Gateway version 3.1.12.3.2 Description A reflected cross-site scripting issue exists, allowing a remote unauthenticated attacker to execute arbitrary HTML code via a crafted URL. Recommendations For version 3.1.12.3.2, at the...
PT-2020-17006
Name of the Vulnerable Software and Affected Versions TranzWare Payment Gateway version 3.1.12.3.2 Description A reflected cross-site scripting issue exists, allowing a remote unauthenticated attacker to execute arbitrary HTML code via a crafted URL. Recommendations For version 3.1.12.3.2, at the...
CVE-2020-28414: Improper Neutralization of Input During Web Page Generation
A reflected cross-site scripting XSS vulnerability exists in the TranzWare Payment Gateway 3.1.12.3.2. A remote unauthenticated attacker is able to execute arbitrary HTML code via crafted url different vector than CVE-2020-28415...