The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the success.php fort_id parameter.
References
Link | Resource |
---|---|
http://www.securityfocus.com/bid/105930 | Third Party Advisory VDB Entry |
https://github.com/payfort/payfort-php-sdk/issues/12 | Exploit Third Party Advisory |
https://www.seekurity.com/blog/general/payfort-multiple-security-issues-and-concerns-in-a-supposed-to-be-pci-dss-compliant-payment-processor-sdk | Exploit Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2018-11-14T07:00:00
Updated: 2018-11-16T10:57:01
Reserved: 2018-11-11T00:00:00
Link: CVE-2018-19188
JSON object: View
NVD Information
Status : Analyzed
Published: 2018-11-14T09:29:00.387
Modified: 2018-12-17T20:07:06.037
Link: CVE-2018-19188
JSON object: View
Redhat Information
No data.
CWE