The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the error.php error_msg parameter.
References
Link | Resource |
---|---|
http://www.securityfocus.com/bid/105930 | Third Party Advisory VDB Entry |
https://www.seekurity.com/blog/general/payfort-multiple-security-issues-and-concerns-in-a-supposed-to-be-pci-dss-compliant-payment-processor-sdk | Exploit Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2018-11-14T07:00:00
Updated: 2018-11-16T10:57:01
Reserved: 2018-11-11T00:00:00
Link: CVE-2018-19190
JSON object: View
NVD Information
Status : Analyzed
Published: 2018-11-14T09:29:00.497
Modified: 2018-12-17T20:07:19.427
Link: CVE-2018-19190
JSON object: View
Redhat Information
No data.
CWE