Skip to content

Latest commit

 

History

History

paymoney-3.3

Folders and files

NameName
Last commit message
Last commit date

parent directory

..
 
 
 
 

Description:

The parameters first_name and last_name in Users are vulnerable from XSS-Reflected on Paymoney-3.3. The already authenticated users can be hijacking the XSRF-Token and they can use it for malicious purposes on internal and external domains.

STATUS:

Medium

Proof and Exploit:

More:

href