149 matches found
CVE-2016-15015 viafintech Barzahlen Payment Module PHP SDK Webhook.php verify timing discrepancy
A vulnerability, which was classified as problematic, was found in viafintech Barzahlen Payment Module PHP SDK up to 2.0.0. Affected is the function verify of the file src/Webhook.php. The manipulation leads to observable timing discrepancy. The complexity of an attack is rather high. The...
CVE-2016-15015
CVE-2016-15015 affects viafintech Barzahlen Payment Module PHP SDK up to 2.0.0. The vulnerability is in verify (src/Webhook.php) and exposes observable timing discrepancy, enabling potential information disclosure. Exploitation details are not provided beyond timing differences; attack complexity...
CVE-2016-15015
A vulnerability, which was classified as problematic, was found in viafintech Barzahlen Payment Module PHP SDK up to 2.0.0. Affected is the function verify of the file src/Webhook.php. The manipulation leads to observable timing discrepancy. The complexity of an attack is rather high. The...
CVE-2016-15015: Observable Timing Discrepancy
A vulnerability, which was classified as problematic, was found in viafintech Barzahlen Payment Module PHP SDK up to 2.0.0. Affected is the function verify of the file src/Webhook.php. The manipulation leads to observable timing discrepancy. The complexity of an attack is rather high. The...
GHSA-RWQQ-P4P9-5WPQ Wechat-php-sdk is affected by a Cross Site Scripting vulnerability.
Wechat-php-sdk v1.10.2 is affected by a Cross Site Scripting XSS vulnerability in Wechat.php...
Wechat-php-sdk is affected by a Cross Site Scripting vulnerability.
Wechat-php-sdk v1.10.2 is affected by a Cross Site Scripting XSS vulnerability in Wechat.php...
CVE-2021-43678
Wechat-php-sdk v1.10.2 is affected by a Cross Site Scripting XSS vulnerability in Wechat.php...
CVE-2021-43678
Wechat-php-sdk v1.10.2 is affected by a Cross Site Scripting XSS vulnerability in Wechat.php...
CVE-2021-43678
CVE-2021-43678 affects the PHP package wechat-php-sdk v1.10.2, with the vulnerability located in the Wechat.php file. Multiple connected advisories describe a Cross Site Scripting (XSS) vulnerability arising from insufficient sanitization, notably in the serve() function cited by Veracode. Exploi...
CVE-2021-43678
Wechat-php-sdk v1.10.2 is affected by a Cross Site Scripting XSS vulnerability in Wechat.php...
CVE-2021-43678
Wechat-php-sdk v1.10.2 is affected by a Cross Site Scripting XSS vulnerability in Wechat.php...
PT-2021-23906
Name of the Vulnerable Software and Affected Versions: Wechat-php-sdk version 1.10.2 Description: The issue is a Cross Site Scripting XSS vulnerability in Wechat.php. Recommendations: For Wechat-php-sdk version 1.10.2, update to a version that fixes the XSS vulnerability in Wechat.php...
CVE-2021-43678: Improper Neutralization of Input During Web Page Generation
Wechat-php-sdk v1.10.2 is affected by a Cross Site Scripting XSS vulnerability in Wechat.php...
Insecure Certificate Validation
globalpayments/php-sdk is vulnerable to insecure certificate validation. The vulnerability exists in the sendRequest function in Gateway.php as it does not properly enforce the SSL certificate validations...
Improper Certificate Validation in Heartland & Global Payments PHP SDK
Gateways/Gateway.php in Heartland & Global Payments PHP SDK before 2.0.0 does not enforce SSL certificate validations...
GHSA-PM77-C4Q7-3FWJ Improper Certificate Validation in Heartland & Global Payments PHP SDK
Gateways/Gateway.php in Heartland & Global Payments PHP SDK before 2.0.0 does not enforce SSL certificate validations...
CVE-2019-20455
Gateways/Gateway.php in Heartland & Global Payments PHP SDK before 2.0.0 does not enforce SSL certificate validations...
Design/Logic Flaw
Gateways/Gateway.php in Heartland & Global Payments PHP SDK before 2.0.0 does not enforce SSL certificate validations...
CVE-2019-20455
The CVE-2019-20455 entry affects the Heartland & Global Payments PHP SDK (Gateway.php) prior to version 2.0.0, where SSL certificate validation is not enforced. This can allow MITM-style interception of TLS traffic and exposure of sensitive data, as indicated by the CVE details and Red Hat/Veraco...