CVE-2024-33981

CVE-2024-33981 describes a Cross-Site Scripting (XSS) vulnerability in PayPal, Credit Card and Debit Card Payment version 1.0. The issue allows an attacker to craft a URL and lure a victim to exfiltrate session cookies via the start parameter in /admin/mod_reports/index.php. Affected component/pr...

CVE-2024-33980 Cross-site Scripting in Janobe products

Cross-Site Scripting XSS vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'start' parameter in '/admin/modreports/printreport.php'...

CVE-2024-33980

CVE-2024-33980 is a Cross-Site Scripting (XSS) vulnerability affecting Janobe’s PayPal, Credit Card and Debit Card Payment product version 1.0. The issue enables an attacker to lure a victim with a crafted URL and access the victim’s session cookie via the ‘start’ parameter in /admin/mod_reports/...

CVE-2024-33979 Cross-site Scripting in Janobe products

Cross-Site Scripting XSS vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'q', 'arrival', 'departure' and 'accomodation' parameters in...

CVE-2024-33979 Cross-site Scripting in Janobe products

Cross-Site Scripting XSS vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'q', 'arrival', 'departure' and 'accomodation' parameters in...

CVE-2024-33979

CVE-2024-33979 describes a Cross-Site Scripting (XSS) vulnerability in Janobe products labeled as PayPal, Credit Card and Debit Card Payment, version 1.0. The issue arises from improperly handling user-supplied input in the query/URL parameters within “/index.php” (notably the q, arrival, departu...

PayPal,Credit Card and Debit Card Payment SQL注入漏洞

PayPal,Credit Card and Debit Card Payment is a PayPal, Credit Card and Debit Card Payment software by janobe individual developer. A SQL injection vulnerability exists in PayPal,Credit Card and Debit Card Payment version 1.0. An attacker can use this vulnerability to send a specially crafted quer...

PayPal,Credit Card and Debit Card Payment SQL注入漏洞

PayPal,Credit Card and Debit Card Payment is a PayPal, Credit Card and Debit Card Payment software by janobe individual developer. A SQL injection vulnerability exists in PayPal,Credit Card and Debit Card Payment version 1.0. An attacker can use this vulnerability to send a specially crafted quer...

PayPal,Credit Card and Debit Card Payment SQL注入漏洞

PayPal,Credit Card and Debit Card Payment is a PayPal, Credit Card and Debit Card Payment software by janobe individual developer. A SQL injection vulnerability exists in PayPal,Credit Card and Debit Card Payment version 1.0. An attacker can use this vulnerability to send a specially crafted quer...

PayPal,Credit Card and Debit Card Payment 跨站脚本漏洞

PayPal,Credit Card and Debit Card Payment is a PayPal, Credit Card and Debit Card Payment software by janobe Personal Developer. A cross-site scripting vulnerability exists in PayPal,Credit Card and Debit Card Payment version 1.0. An attacker can create a specially crafted URL and send it to the...

PayPal,Credit Card and Debit Card Payment SQL注入漏洞

PayPal,Credit Card and Debit Card Payment is a PayPal, Credit Card and Debit Card Payment software by janobe individual developer. A SQL injection vulnerability exists in PayPal,Credit Card and Debit Card Payment version 1.0. An attacker can use this vulnerability to send a specially crafted quer...

PT-2024-25593 · Paypal · Paypal

Name of the Vulnerable Software and Affected Versions: PayPal, Credit Card and Debit Card Payment version 1.0 Description: The issue allows an attacker to exploit a SQL injection vulnerability by sending a specially crafted query to the server, potentially retrieving all stored information throug...

MAL-2024-2093 Malicious code in direct-debit (npm)

False positive caused by problematic ingestion. --- -= Per source details. Do not edit below this line.=-...

Malicious code in @zettle-bo/direct-debit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e6f4aa58a67054f3bd6830bfbfd2e23c6e7bfe7c7ef070fc3306b2513844832 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8197 Malicious code in @zettle-bo/direct-debit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e6f4aa58a67054f3bd6830bfbfd2e23c6e7bfe7c7ef070fc3306b2513844832 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Update 15.17 for Microsoft Dynamics 365 Business Central 2019 Release Wave 2 (Application Build 15.17.49440, Platform Build 15.0.49431)

None None...

Expense Management System SQL注入漏洞

Expense Management System is an expense management system. version v1.0 of Expense Management System is vulnerable to SQL injection, which stems from a lack of validation of external input SQL statements in the id parameter of its /Home/debitcreditp component. An attacker could use this...

CVE-2022-36754

Expense Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /Home/debitcreditp...

CVE-2022-36754

Expense Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /Home/debitcreditp...

Expense Management System SQL注入漏洞

Expense Management System is an expense management system. version v1.0 of Expense Management System is vulnerable to SQL injection, which stems from a lack of validation of external input SQL statements in the id parameter of its /Home/debitcreditp component. An attacker could use this...