CVEs-PoC/2018/CVE-2018-19186.md at dc3bd6cd71a486f862e7cf4da52fce4cfeb10e52 - CVEs-PoC - MS-GitHub-Backup (Gitea)

CalvinBackup/CVEs-PoC

mirror of https://github.com/0xMarcio/cve.git synced 2026-05-08 10:14:49 +02:00

Files

T

0xMarcio 48a00929ac Removed duplicates

2024-06-18 02:51:15 +02:00

691 B

Raw Blame History

CVE-2018-19186

Description

The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the route.php paymentMethod parameter.

POC

Reference

https://www.seekurity.com/blog/general/payfort-multiple-security-issues-and-concerns-in-a-supposed-to-be-pci-dss-compliant-payment-processor-sdk

Github

No PoCs found on GitHub currently.