The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via an arbitrary parameter name or value that is mishandled in an error.php echo statement.
References
Link | Resource |
---|---|
http://www.securityfocus.com/bid/105930 | Third Party Advisory VDB Entry |
https://www.seekurity.com/blog/general/payfort-multiple-security-issues-and-concerns-in-a-supposed-to-be-pci-dss-compliant-payment-processor-sdk | Exploit Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2018-11-14T07:00:00
Updated: 2018-11-16T10:57:01
Reserved: 2018-11-11T00:00:00
Link: CVE-2018-19189
JSON object: View
NVD Information
Status : Analyzed
Published: 2018-11-14T09:29:00.450
Modified: 2018-12-17T20:07:15.270
Link: CVE-2018-19189
JSON object: View
Redhat Information
No data.
CWE