Lucene search
+L

6 matches found

OSV
OSV
•added 2024/08/06 11:16 a.m.•15 views

CVE-2024-33980

Cross-Site Scripting XSS vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'start' parameter in '/admin/modreports/printreport.php'...

6.1CVSS5.8AI score0.00283EPSS
SaveExploits0References1
NVD
NVD
•added 2024/08/06 11:16 a.m.•39 views

CVE-2024-33980

Cross-Site Scripting XSS vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'start' parameter in '/admin/modreports/printreport.php'...

7.1CVSS0.00283EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/08/06 12:00 a.m.•13 views

PayPal,Credit Card and Debit Card Payment SQL注入漏洞

PayPal,Credit Card and Debit Card Payment is a PayPal, Credit Card and Debit Card Payment software by janobe individual developer. A SQL injection vulnerability exists in PayPal,Credit Card and Debit Card Payment version 1.0. An attacker can use this vulnerability to send a specially crafted quer...

9.8CVSS7.5AI score0.0041EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/08/06 12:00 a.m.•19 views

PT-2024-25591 · Paypal · Paypal

Name of the Vulnerable Software and Affected Versions: PayPal, Credit Card and Debit Card Payment version 1.0 Description: The issue allows an attacker to exploit a SQL injection vulnerability by sending a specially crafted query to the server. This can lead to the retrieval of all information...

9.8CVSS7.2AI score0.0041EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2024/08/06 12:00 a.m.•21 views

PT-2024-25592 · Unknown · Janobe Paypal/Card Payment

Name of the Vulnerable Software and Affected Versions: Janobe PayPal/Card Payment version 1.0 Description: A SQL injection issue affects the payment system, allowing an attacker to send a specially crafted query to the server and retrieve stored information through the end parameter in the...

9.8CVSS8AI score0.00461EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/11/14 12:00 a.m.•3 views

CVE-2008-5089: Undefined Security Weakness

Multiple insecure method vulnerabilities in the DDActiveReportsViewer2.ARViewer2 ActiveX control arview2.ocx in Data Dynamics ActiveReports 2.5.0.1314 allow remote attackers to overwrite arbitrary files via a call to the 1 Pages.Save, 2 PrintReport, or 3 Canvas.Save method...

9.3CVSS6AI score0.0283EPSS
SaveExploits0References1
Rows per page
Query Builder