CVE-2025-29788

The Syliud PayPal Plugin is the Sylius Core Team’s plugin for the PayPal Commerce Platform. A vulnerability in versions prior to 1.6.1, 1.7.1, and 2.0.1 allows users to manipulate the final payment amount processed by PayPal. If a user modifies the item quantity in their shopping cart after...

PayPal Plugin 安全漏洞

PayPal Plugin is an open source plugin for the PayPal commerce platform from Sylius eCommerce. A security vulnerability exists in PayPal Plugin versions prior to 1.6.1, prior to 1.7.1, and prior to 2.0.1, which stems from payment amount manipulation and could lead to fraud...

PT-2025-11485

Name of the Vulnerable Software and Affected Versions Syliud PayPal Plugin versions prior to 1.6.1, 1.7.1, and 2.0.1 Description A vulnerability in the Syliud PayPal Plugin allows users to manipulate the final payment amount processed by PayPal. If a user modifies the item quantity in their...

CVE-2025-29788: External Control of Assumed-Immutable Web Parameter

The Syliud PayPal Plugin is the Sylius Core Team’s plugin for the PayPal Commerce Platform. A vulnerability in versions prior to 1.6.1, 1.7.1, and 2.0.1 allows users to manipulate the final payment amount processed by PayPal. If a user modifies the item quantity in their shopping cart after...

CVE-2025-25382

An issue in the Property Tax Payment Portal of Information Kerala Mission SANCHAYA v3.0.4 allows an attacker to arbitrarily modify payment amounts by sending a crafted request . This vulnerability involves the External Control of Assumed-Immutable Web Parameter (CWE-472). The impact is categorize...

CVE-2025-25382: External Control of Assumed-Immutable Web Parameter

An issue in the Property Tax Payment Portal in Information Kerala Mission SANCHAYA v3.0.4 allows attackers to arbitrarily modify payment amounts via a crafted request...

Logic Flaw Vulnerability in WordPress Simple PayPal Shopping Cart

WordPress is a blogging platform developed using the PHP language. Users can set up their own websites on servers that support PHP and MySQL databases. A logic flaw exists in WordPress Simple PayPal Shopping Cart. An attacker can exploit the vulnerability to modify the payment amount...

Cangzhou Jialan Network Technology Co., Ltd. virtual goods automatic delivery system there are logical flaws vulnerabilities

JiaBlue virtual goods automatic delivery system is the latest one-stop self-service delivery platform launched by JiaBlue Technology, which supports automatic delivery of virtual goods, paid article reading, paid audio and video, paid gallery and so on. The whole process does not require human...

Shijiazhuang City Zhenghong Network Technology Co., Ltd. Shop7z online shopping system fashion version of the existence of logic flaws vulnerability

Shop7z online shopping system is ASP online store platform software, providing comprehensive application services based on Internet solutions. Shijiazhuang City Zhenghong Network Technology Co., Ltd. Shop7z online shopping system fashion version of the existence of logical flaws in the...

Logic Flaw Vulnerability in Shop7 Online Shopping System Flagship Edition

Shop7 online shopping system flagship version is to support Alipay, WeChat payment and a variety of commonly used interfaces, computer version and cell phone version and APP seamless combination of data as a whole. Shop7 online shopping system flagship version of the existence of logical flaws in...

Logic flaw vulnerability in the payment system of Jiangsu Jinzhi Education Information Technology Co.

Jiangsu Jinzhi Education Information Technology Co., Ltd. is the largest education informatization service provider in China. A logic flaw vulnerability exists in the payment system of Jiangsu Jinzhi Education Information Technology Co. Ltd. that can be exploited by an attacker to modify the...

Logic flaws exist in the website building system of China Enterprise Dynamics Technology Co.

Based on PaaS+SaaS service model, CEC Technology Co., Ltd. integrates Portal Cloud, Business Cloud, Marketing Cloud, Management Cloud and Design Cloud into one-stop Internet intelligent operation services and industry solutions to meet the personalized and diversified Internet transformation need...

Payment Logic Vulnerability in Cloud Industry CMS ca***.php File

Yunye CMS is an enterprise website building system developed by Luoyang Yunye Information Technology Co. Payment logic vulnerability exists in the CMS ca.php file. Attackers can use this vulnerability to arbitrarily modify the size of the payment amount...

CVE-2019-9864

PHP Scripts Mall Amazon Affiliate Store 2.1.6 allows Parameter Tampering of the payment amount...

PT-2019-19899

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Amazon Affiliate Store version 2.1.6 Description The issue allows for parameter tampering of the payment amount variable. This means an attacker could potentially manipulate the payment amount during a transaction...

CVE-2019-9864: Undefined Security Weakness

PHP Scripts Mall Amazon Affiliate Store 2.1.6 allows Parameter Tampering of the payment amount...

PHP Scripts Mall Custom T-Shirt Ecommerce Script Input Validation Vulnerability

PHP Scripts Mall Custom T-Shirt Ecommerce Script is a website system for customizing t-shirts online by PHP Scripts Mall India. An input validation vulnerability exists in PHP Scripts Mall Custom T-Shirt Ecommerce Script version 3.1.1, which can be exploited by an attacker to change the amount of...

CVE-2019-9065

PHP Scripts Mall Custom T-Shirt Ecommerce Script 3.1.1 allows parameter tampering of the payment amount...

PT-2019-19348

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Custom T-Shirt Ecommerce Script version 3.1.1 Description The issue allows for parameter tampering of the payment amount variable, potentially enabling unauthorized modifications to payment amounts. Recommendations For PHP...

PT-2019-19346

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Auction website script version 2.0.4 Description The issue allows for parameter tampering of the payment amount variable. This means an attacker could potentially manipulate the payment amount during a transaction...