Lucene search
+L

8 matches found

Github Security Blog
Github Security Blog
•added 2022/05/14 2:58 a.m.•47 views

paypal/invoice-sdk-php reflected XSS

paypal/invoice-sdk-php is vulnerable to reflected XSS in samples/permissions.php via the permToken parameter, resulting in code execution...

5.4CVSS6.4AI score0.00805EPSS
SaveExploits1References3Affected Software1
osv_ghsa
osv_ghsa
•added 2022/05/14 2:58 a.m.•43 views

GHSA-626W-HMPW-X74J paypal/invoice-sdk-php reflected XSS

paypal/invoice-sdk-php is vulnerable to reflected XSS in samples/permissions.php via the permToken parameter, resulting in code execution...

5.4CVSS5.4AI score0.00805EPSS
SaveExploits1References3
Veracode
Veracode
•added 2018/08/03 5:05 a.m.•29 views

Cross-site Scripting (XSS)

paypal/invoice-sdk-php is vulnerable to cross-site scripting XSS attacks. The vulnerability exists due to the lack of sanitization of permToken and allows arbitrary scripts to be rendered in samples/permissions.php...

5.4CVSS5.2AI score0.00805EPSS
SaveExploits1References3Affected Software1
NVD
NVD
•added 2018/08/02 9:29 p.m.•23 views

CVE-2017-6213

paypal/invoice-sdk-php is vulnerable to reflected XSS in samples/permissions.php via the permToken parameter, resulting in code execution...

5.4CVSS5.5AI score0.00805EPSS
SaveExploits1References1
Prion
Prion
•added 2018/08/02 9:29 p.m.•24 views

Remote code execution

paypal/invoice-sdk-php is vulnerable to reflected XSS in samples/permissions.php via the permToken parameter, resulting in code execution...

3.5CVSS5.5AI score0.00805EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2018/08/02 9:00 p.m.•32 views

CVE-2017-6213

paypal/invoice-sdk-php is vulnerable to reflected XSS in samples/permissions.php via the permToken parameter, resulting in code execution...

5.5AI score0.00805EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2018/08/02 12:00 a.m.•3 views

PT-2018-8320

Name of the Vulnerable Software and Affected Versions paypal/invoice-sdk-php affected versions not specified Description The issue concerns a reflected XSS in the samples/permissions.php file via the permToken parameter, which can lead to code execution. Recommendations At the moment, there is no...

5.4CVSS0.00805EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/08/02 12:00 a.m.•8 views

CVE-2017-6213: Improper Neutralization of Input During Web Page Generation

paypal/invoice-sdk-php is vulnerable to reflected XSS in samples/permissions.php via the permToken parameter, resulting in code execution...

5.4CVSS6.2AI score0.00805EPSS
SaveExploits1References2
Rows per page
Query Builder