Lucene search
+L

30 matches found

OSV
OSV
•added 2018/11/14 9:29 a.m.•17 views

CVE-2018-19187

The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via an arbitrary parameter name or value that is mishandled in a success.php echo statement...

6.1CVSS5.9AI score0.00864EPSS
SaveExploits1References2
NVD
NVD
•added 2018/11/14 9:29 a.m.•26 views

CVE-2018-19188

The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the success.php fortid parameter...

6.1CVSS6.1AI score0.01516EPSS
SaveExploits1References3
Prion
Prion
•added 2018/11/14 9:29 a.m.•23 views

Code injection

The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the success.php fortid parameter...

4.3CVSS6AI score0.01516EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2018/11/14 7:00 a.m.•41 views

CVE-2018-19187

The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via an arbitrary parameter name or value that is mishandled in a success.php echo statement...

6.1AI score0.00864EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2018/11/14 12:00 a.m.•1 views

PT-2018-14849

Name of the Vulnerable Software and Affected Versions payfort-php-SDK versions through 2018-04-26 Description The issue concerns a security problem where an attacker can execute malicious scripts. This is achieved by exploiting the fort id parameter in the success.php file, allowing for malicious...

6.1CVSS0.01516EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/11/14 12:00 a.m.•4 views

CVE-2018-19187: Improper Neutralization of Input During Web Page Generation

The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via an arbitrary parameter name or value that is mishandled in a success.php echo statement...

6.1CVSS6.4AI score0.00864EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2018/11/14 12:00 a.m.•2 views

PT-2018-14848

Name of the Vulnerable Software and Affected Versions payfort-php-SDK versions through 2018-04-26 Description The issue concerns a mishandling of arbitrary parameter names or values in a success.php echo statement, leading to XSS. Recommendations For payfort-php-SDK versions through 2018-04-26,...

6.1CVSS0.00864EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/11/14 12:00 a.m.•5 views

CVE-2018-19188: Improper Neutralization of Input During Web Page Generation

The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the success.php fortid parameter...

6.1CVSS6.3AI score0.01516EPSS
SaveExploits1References2
Openbugbounty
Openbugbounty
•added 2016/12/20 12:58 p.m.•22 views

besthosting.ua XSS vulnerability

Vulnerable URL: https://besthosting.ua/ru/success.php?order=42785=3.00%20$XXXX%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 69707...

6.3AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2015/10/19 6:46 a.m.•16 views

beautysecrets.co.za XSS vulnerability

Vulnerable URL: http://www.beautysecrets.co.za/form-success.php?msg=RK%3E%3C%3E%3C%3E%3C%3E%3C%3E%3C%3E%3C%3E%3Cimg%20src=x%20onerror=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:|...

6.3AI score
SaveExploits0
Rows per page
Query Builder