Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Amazon Subscribe
Filtered by product Payfort-php-sdk
Total 5 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-19186 1 Amazon 1 Payfort-php-sdk 2018-12-17 4.3 MEDIUM 6.1 MEDIUM
The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the route.php paymentMethod parameter.
CVE-2018-19187 1 Amazon 1 Payfort-php-sdk 2018-12-17 4.3 MEDIUM 6.1 MEDIUM
The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via an arbitrary parameter name or value that is mishandled in a success.php echo statement.
CVE-2018-19188 1 Amazon 1 Payfort-php-sdk 2018-12-17 4.3 MEDIUM 6.1 MEDIUM
The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the success.php fort_id parameter.
CVE-2018-19189 1 Amazon 1 Payfort-php-sdk 2018-12-17 4.3 MEDIUM 6.1 MEDIUM
The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via an arbitrary parameter name or value that is mishandled in an error.php echo statement.
CVE-2018-19190 1 Amazon 1 Payfort-php-sdk 2018-12-17 4.3 MEDIUM 6.1 MEDIUM
The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the error.php error_msg parameter.