7 matches found
CVE-2026-43883
WWBN AVideo is an open source video platform. In versions up to and including 29.0, plugin/PayPalYPT/agreementCancel.json.php cancels a PayPal billing agreement using an attacker-supplied agreement parameter without verifying that the authenticated user owns the agreement. A low-privilege...
CVE-2026-43883
WWBN AVideo is an open source video platform. In versions up to and including 29.0, plugin/PayPalYPT/agreementCancel.json.php cancels a PayPal billing agreement using an attacker-supplied agreement parameter without verifying that the authenticated user owns the agreement. A low-privilege...
CVE-2026-43883 WWBN AVideo: IDOR in PayPalYPT agreementCancel.json.php Allows Any Authenticated User to Cancel Arbitrary PayPal Subscription Agreements
WWBN AVideo is an open source video platform. In versions up to and including 29.0, plugin/PayPalYPT/agreementCancel.json.php cancels a PayPal billing agreement using an attacker-supplied agreement parameter without verifying that the authenticated user owns the agreement. A low-privilege...
PT-2026-37299
Name of the Vulnerable Software and Affected Versions WWBN AVideo versions prior to 29.1 Description An authorization gap exists in the PayPalYPT plugin where the endpoint 'plugin/PayPalYPT/agreementCancel.json.php' cancels a PayPal billing agreement using an attacker-supplied agreement parameter...
iDevSpot Text Ads 2.08 SQL Injection
Title:idevspot Text ads 2.08 sqli vulnerability Author: Sid3^effects Published: 2010-06-06 price:$147 email:[email protected] vendor: idevspot url : http://www.idevspot.com/TextAds2.php google dork : Powered by TextAds 2.08 ooooo .oooooo. oooooo oooooo oooo 888' d8P' Y8b 888. 888. .8' 888 888 88...
idevspot Text ads 2.08 - SQL Injection
idevspot Text ads 2.08 - SQL Injection Title:idevspot Text ads 2.08 sqli vulnerability Author: Sid3^effects Published: 2010-06-06 price:$147 email:[email protected] vendor: idevspot url : http://www.idevspot.com/TextAds2.php google dork : Powered by TextAds 2.08 ooooo .oooooo. oooooo oooooo oooo...
idevspot Text ads 2.08 - SQL Injection
Title:idevspot Text ads 2.08 sqli vulnerability Author: Sid3^effects Published: 2010-06-06 price:$147 email:[email protected] vendor: idevspot url : http://www.idevspot.com/TextAds2.php google dork : Powered by TextAds 2.08 ooooo .oooooo. oooooo oooooo oooo 888' d8P' Y8b 888. 888. .8' 888 888 88...