CVE-2018-19190: Improper Neutralization of Input During Web Page Generation

The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the error.php errormsg parameter...

PAYFORT payfort-php-SDK cross-site scripting vulnerability (CNVD-2019-08574)

PayFort is an online payment gateway. payfort-php-SDK is the PayFort payment gateway SDK. A cross-site scripting vulnerability exists in Amazon PAYFORT payfort-php-SDK on 2018-04-26 and earlier versions, which can be exploited by an attacker via the route.php paymentMethod parameter to conduct a...

PT-2018-14851

Name of the Vulnerable Software and Affected Versions payfort-php-SDK versions through 2018-04-26 Description The issue concerns an XSS vulnerability via the error msg parameter in the error.php file. Recommendations For payfort-php-SDK versions through 2018-04-26, avoid using the error msg...

PAYFORT payfort-php-SDK cross-site scripting vulnerability

PayFort is an online payment gateway. payfort-php-SDK is the PayFort payment gateway SDK. A cross-site scripting vulnerability exists in Amazon PAYFORT payfort-php-SDK on 2018-04-26 and earlier versions, which can be exploited by an attacker via the error.php errormsg parameter to conduct a...

CVE-2018-19187: Improper Neutralization of Input During Web Page Generation

The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via an arbitrary parameter name or value that is mishandled in a success.php echo statement...

CVE-2018-19188: Improper Neutralization of Input During Web Page Generation

The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the success.php fortid parameter...

PT-2018-14847

Name of the Vulnerable Software and Affected Versions payfort-php-SDK versions through 2018-04-26 Description The issue concerns an XSS vulnerability via the paymentMethod parameter in the route.php file. Recommendations For payfort-php-SDK versions through 2018-04-26, consider restricting access...

CVE-2018-19189: Improper Neutralization of Input During Web Page Generation

The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via an arbitrary parameter name or value that is mishandled in an error.php echo statement...