paymenter/paymenter
Composer · بسته
اطلاعرسانی آسیبپذیری
دنبالکردن| گزارش | محصول | اکوسیستم | شدت | وضعیت اصلاح | آخرین تغییر |
|---|---|---|---|---|---|
| Paymenter has a credit-refund double-spend race condition in service downgrade (doUpgrade) | paymenter/paymenter | Composer | متوسط | اصلاح گزارش شده | |
| Paymenter has race condition in payWithCredit() that enables credit double-spend | paymenter/paymenter | Composer | متوسط | اصلاح گزارش شده | |
| Paymenter has URL parameter injection that bypasses paid plan limits at checkout | paymenter/paymenter | Composer | زیاد | اصلاح گزارش شده | |
| Paymenter vulnerable to Remote Code Execution via public file uploads | paymenter/paymenter | Composer | بحرانی | اصلاح گزارش شده | |
| Paymenter doesn't reset email verification status after email change | paymenter/paymenter | Composer | متوسط | اصلاح گزارش شده | |
| Paymenter has Blind Unauthenticated SSRF on the Paypal gateway module | paymenter/paymenter | Composer | متوسط | اصلاح گزارش شده | |
| Paymenter has broken object level authorization via service reference manipulation on ticket creation | paymenter/paymenter | Composer | متوسط | اصلاح گزارش شده |