EUVD-2019-18449

Malware in sbrugna...

External Control of Assumed-Immutable Web Parameter

Overview sylius/paypal-plugin is a PayPal plugin for Sylius. Affected versions of this package are vulnerable to External Control of Assumed-Immutable Web Parameter. The user-input payment amount is not adequately confirmed to be the same between payment completion and order authorization, in...

CVE-2025-29788

The Syliud PayPal Plugin is the Sylius Core Team’s plugin for the PayPal Commerce Platform. A vulnerability in versions prior to 1.6.1, 1.7.1, and 2.0.1 allows users to manipulate the final payment amount processed by PayPal. If a user modifies the item quantity in their shopping cart after...

External Control of Assumed-Immutable Web Parameter

Overview sylius/paypal-plugin is a PayPal plugin for Sylius. Affected versions of this package are vulnerable to External Control of Assumed-Immutable Web Parameter. The user-input payment amount is not adequately confirmed to be the same between initial entry and payment completion, in...

CVE-2025-29788 Sylius PayPal Plugin Payment Amount Manipulation Vulnerability

The Syliud PayPal Plugin is the Sylius Core Team’s plugin for the PayPal Commerce Platform. A vulnerability in versions prior to 1.6.1, 1.7.1, and 2.0.1 allows users to manipulate the final payment amount processed by PayPal. If a user modifies the item quantity in their shopping cart after...

CVE-2025-29788 Sylius PayPal Plugin Payment Amount Manipulation Vulnerability

The Syliud PayPal Plugin is the Sylius Core Team’s plugin for the PayPal Commerce Platform. A vulnerability in versions prior to 1.6.1, 1.7.1, and 2.0.1 allows users to manipulate the final payment amount processed by PayPal. If a user modifies the item quantity in their shopping cart after...

PayPal Plugin 安全漏洞

PayPal Plugin is an open source plugin for the PayPal commerce platform from Sylius eCommerce. A security vulnerability exists in PayPal Plugin versions prior to 1.6.1, prior to 1.7.1, and prior to 2.0.1, which stems from payment amount manipulation and could lead to fraud...

CVE-2025-25382

CVE-2025-25382 affects Information Kerala Mission SANCHAYA v3.0.4 (Property Tax Payment Portal). A crafted request allows an attacker to arbitrarily modify payment amounts. The exact root cause is not explicitly detailed in the provided documents. Reported remediation suggestions include restrict...

Logic Flaw Vulnerability in WordPress Simple PayPal Shopping Cart

WordPress is a blogging platform developed using the PHP language. Users can set up their own websites on servers that support PHP and MySQL databases. A logic flaw exists in WordPress Simple PayPal Shopping Cart. An attacker can exploit the vulnerability to modify the payment amount...

Cangzhou Jialan Network Technology Co., Ltd. virtual goods automatic delivery system there are logical flaws vulnerabilities

JiaBlue virtual goods automatic delivery system is the latest one-stop self-service delivery platform launched by JiaBlue Technology, which supports automatic delivery of virtual goods, paid article reading, paid audio and video, paid gallery and so on. The whole process does not require human...

Shijiazhuang City Zhenghong Network Technology Co., Ltd. Shop7z online shopping system fashion version of the existence of logic flaws vulnerability

Shop7z online shopping system is ASP online store platform software, providing comprehensive application services based on Internet solutions. Shijiazhuang City Zhenghong Network Technology Co., Ltd. Shop7z online shopping system fashion version of the existence of logical flaws in the...

Logic Flaw Vulnerability in Shop7 Online Shopping System Flagship Edition

Shop7 online shopping system flagship version is to support Alipay, WeChat payment and a variety of commonly used interfaces, computer version and cell phone version and APP seamless combination of data as a whole. Shop7 online shopping system flagship version of the existence of logical flaws in...

Logic flaw vulnerability in the payment system of Jiangsu Jinzhi Education Information Technology Co.

Jiangsu Jinzhi Education Information Technology Co., Ltd. is the largest education informatization service provider in China. A logic flaw vulnerability exists in the payment system of Jiangsu Jinzhi Education Information Technology Co. Ltd. that can be exploited by an attacker to modify the...

Payment Logic Vulnerability in Cloud Industry CMS ca***.php File

Yunye CMS is an enterprise website building system developed by Luoyang Yunye Information Technology Co. Payment logic vulnerability exists in the CMS ca.php file. Attackers can use this vulnerability to arbitrarily modify the size of the payment amount...

Logic flaws exist in the website building system of China Enterprise Dynamics Technology Co.

Based on PaaS+SaaS service model, CEC Technology Co., Ltd. integrates Portal Cloud, Business Cloud, Marketing Cloud, Management Cloud and Design Cloud into one-stop Internet intelligent operation services and industry solutions to meet the personalized and diversified Internet transformation need...

CVE-2019-9864

PHP Scripts Mall Amazon Affiliate Store 2.1.6 allows Parameter Tampering of the payment amount...

PHP Scripts Mall Custom T-Shirt Ecommerce Script Input Validation Vulnerability

PHP Scripts Mall Custom T-Shirt Ecommerce Script is a website system for customizing t-shirts online by PHP Scripts Mall India. An input validation vulnerability exists in PHP Scripts Mall Custom T-Shirt Ecommerce Script version 3.1.1, which can be exploited by an attacker to change the amount of...

CVE-2019-9065

PHP Scripts Mall Custom T-Shirt Ecommerce Script 3.1.1 allows parameter tampering of the payment amount...

Payment Design Vulnerability in the Frontend of Rice CMS

DAMI CMS is a PC building station and cell phone building station integrated all-in-one system. A payment design vulnerability exists in the frontend of Daimi CMS. An attacker can utilize this vulnerability to arbitrarily modify the size of the payment amount...

Logic design flaws in Vogelmaster's Android app

Wojia General Manager Android APP is a home control software. There is a logic design vulnerability in Wojia General Management Android APP. An attacker can exploit the vulnerability to modify arbitrary payment amount...