PHPay 2.2 - Cross-Site Scripting

PHPay 2.2 - Cross-Site Scripting source: https://www.securityfocus.com/bid/7310/info It has been reported that user-supplied input to phPay is not sufficiently sanitized. This lack of sanitization provides an opportunity for an attacker to launch cross-site scripting attacks. It is possible for a...

PHPay 2.2 - Multiple Full Path Disclosure Vulnerabilities

PHPay 2.2 - Multiple Full Path Disclosure Vulnerabilities source: https://www.securityfocus.com/bid/7309/info phPay has been reported prone to multiple path disclosure vulnerabilities. It has been reported that when specially crafted requests are made for many phPay pages and include files, an...