CVE-2017-5963: Improper Neutralization of Input During Web Page Generation

An issue was discovered in caddy for TYPO3 before 7.2.10. The vulnerability exists due to insufficient filtration of user-supplied data in the "paymillToken" HTTP POST parameter passed to the "caddy/Resources/Public/JavaScript/e-payment/paymill/api/php/payment.php" URL. An attacker could execute...

beitrambam.org XSS vulnerability

Vulnerable URL: http://www.beitrambam.org/payment.php?notes=%3C/stYle/%3C/titLe/%3C/teXtarEa/%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 25.06.2016 Latest check for patch:| 25.06.2016 11:36 GMT Vulnerability type:| XSS Vulnerability...

thehamptonsynagogue.org XSS vulnerability

Vulnerable URL: http://www.thehamptonsynagogue.org/payment.php?notes=%3C/stYle/%3C/titLe/%3C/teXtarEa/%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4300811 VIP...

bethtikvahsynagogue.org XSS vulnerability

Vulnerable URL: http://www.bethtikvahsynagogue.org/payment.php?notes=%3C/stYle/%3C/titLe/%3C/teXtarEa/%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 26092271 VI...

erpub.org XSS vulnerability

Vulnerable URL: http://www.erpub.org/payment.php?email=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6623500 Google Pagerank| 0 VIP...

TinyShop SQL注入一枚

简要描述： 20140926 详细说明： 因为是支付，会查询订单状态，要先创建一个订单。 /protected/controllers/payment.php中 paybalance函数 totalfee变量 //余额支付方式，服务器端处理 public function paybalance $sign = Req::post'sign';//从post中获取sign $args = Req::post; unset$args'sign'; $totalfee = Req::post'totalfee';//直接从post获取 $attach =...

Bosdates 3.x/4.0 Payment.PHP Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/19191/info Bosdates is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PH...

Simply Sites RGV Local File Inclusion

Exploit for php platform in category web applications ===================================== Simply Sites RGV Local File Inclusion ===================================== Title : Simply Sites RGV Local File Inclusion Author: DevilZ TM Data : 2010-04-01 InformatioN Title : Simply Sites RGV Local File...

CVE-2008-2883: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in include/plugins/jrBrowser/payment.php in Jamroom 3.3.0 through 3.3.5 allows remote attackers to execute arbitrary PHP code via a URL in the jamroomjmdir parameter. NOTE: some of these details are obtained from third party information...

CVE-2006-3957: Undefined Security Weakness

PHP remote file inclusion vulnerability in payment.php in BosDev BosDates allows remote attackers to execute arbitrary PHP code via a URL in the insPath parameter...

PT-2006-4803 · Bosdates · Bosdates

Name of the Vulnerable Software and Affected Versions: BosDates affected versions not specified Description: The issue concerns a remote file inclusion vulnerability in the payment.php file of BosDates. This vulnerability allows remote attackers to execute arbitrary PHP code by providing a URL in...

Bosdates 3.x4.0 - Payment.php Remote File Inclusion

Bosdates 3.x4.0 - Payment.php Remote File Inclusion source: https://www.securityfocus.com/bid/19191/info Bosdates is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file...