30 matches found
CVE-2018-19187
The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via an arbitrary parameter name or value that is mishandled in a success.php echo statement...
CVE-2018-19188
The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the success.php fortid parameter...
Code injection
The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the success.php fortid parameter...
CVE-2018-19187
The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via an arbitrary parameter name or value that is mishandled in a success.php echo statement...
PT-2018-14849
Name of the Vulnerable Software and Affected Versions payfort-php-SDK versions through 2018-04-26 Description The issue concerns a security problem where an attacker can execute malicious scripts. This is achieved by exploiting the fort id parameter in the success.php file, allowing for malicious...
CVE-2018-19187: Improper Neutralization of Input During Web Page Generation
The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via an arbitrary parameter name or value that is mishandled in a success.php echo statement...
PT-2018-14848
Name of the Vulnerable Software and Affected Versions payfort-php-SDK versions through 2018-04-26 Description The issue concerns a mishandling of arbitrary parameter names or values in a success.php echo statement, leading to XSS. Recommendations For payfort-php-SDK versions through 2018-04-26,...
CVE-2018-19188: Improper Neutralization of Input During Web Page Generation
The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the success.php fortid parameter...
besthosting.ua XSS vulnerability
Vulnerable URL: https://besthosting.ua/ru/success.php?order=42785=3.00%20$XXXX%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 69707...
beautysecrets.co.za XSS vulnerability
Vulnerable URL: http://www.beautysecrets.co.za/form-success.php?msg=RK%3E%3C%3E%3C%3E%3C%3E%3C%3E%3C%3E%3C%3E%3Cimg%20src=x%20onerror=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:|...