cve/CVE-2018-19186.md at c42a8175e7a919537d1a63deb490ade8c3ea0285 - cve - 临风笛

admin/cve

mirror of https://github.com/0xMarcio/cve.git synced 2025-06-01 11:10:36 +00:00

0xMarcio 49bdc782b3 Update Sun May 26 14:27:04 CEST 2024

2024-05-26 14:27:05 +02:00

691 B

Raw Blame History

CVE-2018-19186

Description

The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the route.php paymentMethod parameter.

POC

Reference

https://www.seekurity.com/blog/general/payfort-multiple-security-issues-and-concerns-in-a-supposed-to-be-pci-dss-compliant-payment-processor-sdk

Github

No PoCs found on GitHub currently.