Techvillage PayMoney 跨站脚本漏洞

Techvillage Paymoney is a secure online payment gateway from Techvillage Bangladesh. A security vulnerability exists in Techvillage PayMoney version 3.3, which stems from XSS that can be obtained by injecting a specially crafted payload with a description parameter under the Message field...

PT-2022-23835 · Paymoney · Paymoney

Name of the Vulnerable Software and Affected Versions: PayMoney version 3.3 Description: The issue is related to Client Side Remote Code Execution RCE and exists in the reply ticket function, where uploading a malicious file can lead to execution of remote code. When a victim downloads and opens...