Lucene search
+L

76 matches found

OSV
OSV
added 2022/06/13 5:48 a.m.18 views

MAL-2022-5251 Malicious code in paytm-kafka-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8edfa4dabe018178d0903a28e13409a37b657b204270e6036afb5d22488e428a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
added 2021/08/23 12:15 p.m.10 views

CVE-2021-24554

The Paytm – Donation Plugin WordPress plugin through 1.3.2 does not sanitise, validate or escape the id GET parameter before using it in a SQL statement when deleting donations, leading to an authenticated SQL injection issue...

7.2CVSS7.1AI score0.0654EPSS
SaveExploits2References2
NVD
NVD
added 2021/08/23 12:15 p.m.20 views

CVE-2021-24554

The Paytm – Donation Plugin WordPress plugin through 1.3.2 does not sanitise, validate or escape the id GET parameter before using it in a SQL statement when deleting donations, leading to an authenticated SQL injection issue...

7.2CVSS0.0654EPSS
SaveExploits2References2
attackerkb
attackerkb
added 2021/08/23 12:15 p.m.8 views

CVE-2021-24554

The Paytm – Donation Plugin WordPress plugin through 1.3.2 does not sanitise, validate or escape the id GET parameter before using it in a SQL statement when deleting donations, leading to an authenticated SQL injection issue...

7.2CVSS7.1AI score0.0654EPSS
SaveExploits2References4
Prion
Prion
added 2021/08/23 12:15 p.m.20 views

Sql injection

The Paytm – Donation Plugin WordPress plugin through 1.3.2 does not sanitise, validate or escape the id GET parameter before using it in a SQL statement when deleting donations, leading to an authenticated SQL injection issue...

6.5CVSS7.1AI score0.0654EPSS
SaveExploits2References2Affected Software1
CVE
CVE
added 2021/08/23 11:10 a.m.96 views

CVE-2021-24554

CVE-2021-24554 affects the WordPress plugin Paytm Donation (

7.2CVSS7.1AI score0.0654EPSS
SaveExploits2References2Affected Software1
Cvelist
Cvelist
added 2021/08/23 11:10 a.m.37 views

CVE-2021-24554 Paytm - Donation Plugin <= 1.3.2 - Authenticated (admin+) SQL Injection

The Paytm – Donation Plugin WordPress plugin through 1.3.2 does not sanitise, validate or escape the id GET parameter before using it in a SQL statement when deleting donations, leading to an authenticated SQL injection issue...

7.4AI score0.0654EPSS
SaveExploits2References2
CNNVD
CNNVD
added 2021/08/23 12:00 a.m.7 views

WordPress plugin SQL注入漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an open source application plugin for WordPress. A SQL injection vulnerability exists in the WordPress plugin...

7.2CVSS7.4AI score0.0654EPSS
SaveExploits2References2
WPVulnDB
WPVulnDB
added 2021/07/24 12:00 a.m.19 views

Paytm - Donation Plugin <= 1.3.2 - Authenticated (admin+) SQL Injection

The plugin does not sanitise, validate or escape the id GET parameter before using it in a SQL statement when deleting donations, leading to an authenticated SQL injection issue PoC GET /wp-admin/admin.php?page=wppaytmdonation=delete=1%20AND%20SELECT%205581%20FROM%20SELECTSLEEP5Pjwy HTTP/1.1...

6.5CVSS1.6AI score0.0654EPSS
SaveExploits2References1Affected Software1
wpexploit
wpexploit
added 2021/07/24 12:00 a.m.148 views

Paytm - Donation Plugin <= 1.3.2 - Authenticated (admin+) SQL Injection

The plugin does not sanitise, validate or escape the id GET parameter before using it in a SQL statement when deleting donations, leading to an authenticated SQL injection issue GET /wp-admin/admin.php?page=wppaytmdonation&action=delete&id=1%20AND%20SELECT%205581%20FROM%20SELECTSLEEP5Pjwy HTTP/1....

6.5CVSS1.8AI score0.0654EPSS
SaveExploits2References1
Patchstack
Patchstack
added 2021/07/24 12:00 a.m.28 views

WordPress Paytm plugin <= 1.3.2 - Authenticated SQL Injection (SQLi) vulnerability

Authenticated SQL Injection SQLi vulnerability discovered by Shreya Pohekar in WordPress Paytm plugin versions = 1.3.2. Solution This plugin has been closed as of June 3, 2021 and is not available for download. Reason: Security Issue...

7.2CVSS3.4AI score0.0654EPSS
SaveExploits2References3Affected Software1
HackRead
HackRead
added 2020/08/30 7:40 p.m.25 views

Paytm Mall data breach – Hackers gain ‘unrestricted access’ into database

By Waqas A report that hackers are demanding ransom from Paytm Mall and selling its data on hacker forums. This is a post from HackRead.com Read the original post: Paytm Mall data breach - Hackers gain unrestricted access into database...

2.8AI score
SaveExploits0
Hacker One
Hacker One
added 2019/12/21 3:32 p.m.214 views

Zomato: Free food bug done by burp suite

NOTE! Thanks for submitting a report! Please replace all the square sections below with the pertinent details. Remember, the more detail you provide, the easier it is for us to verify and then potentially issue a bounty, so be sure to take your time filling out the report! Summary: By this...

0.3AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2017/04/27 11:18 a.m.37 views

trk.paytmemail.com Open Redirect vulnerability

Vulnerable URL: http://trk.paytmemail.com/emTG4Wyb/?redirecturi=https://openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 19:43 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown...

6.8AI score
SaveExploits0
hackapp
hackapp
added 2016/12/20 8:11 a.m.15 views

Free Paytm Cash & Recharge - Dangerous filesystem permissions, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Free Paytm Cash & Recharge published at the 'play' market has multiple vulnerabilities...

1AI score
SaveExploits0References1Affected Software1
Openbugbounty
Openbugbounty
added 2016/06/10 3:31 p.m.36 views

pguat.paytm.com XSS vulnerability

Vulnerable URL: https://pguat.paytm.com/MerchantSite/bankResponse?ORDERID=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

6.3AI score
SaveExploits0
Rows per page
Query Builder