CVE-2018-19190

概要

参考情報

• securityfocus.com/bid/105930 · Third Party Advisory
• seekurity.com/blog/general/payfort-multiple-security-issues-and-concerns-in-a-supposed-to-be-pci-dss-compliant-payment-processor-sdk · Exploit

payfort-php-sdk のその他の脆弱性

• CVE-2018-19189中 6.1The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via an arbitrary parameter name or value that is mishandle…
• CVE-2018-19188中 6.1The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the success.php fort_id parameter.
• CVE-2018-19187中 6.1The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via an arbitrary parameter name or value that is mishandle…
• CVE-2018-19186中 6.1The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the route.php paymentMethod parameter.