Approved changes feed: RSS · Atom

cpe:2.3:a:janobe:debit_card_payment:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJanobe (958e97e2-37fb-58eb-baa2-792f3e424acf)
ProductDebit Card Payment (f5b19ae6-a880-5523-a9a2-5b8b113a4b71)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-33981 vulnerable 2026-06-03 14:55:53.303752 Cross-site Scripting in Janobe products
HIGH (7.1)
Cross-Site Scripting (XSS) vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'start' parameter in '/admin/mod_reports/index.php'.
Published: 2024-08-06T11:06:40.992Z
Updated: 2024-08-07T18:47:13.010Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-33980 vulnerable 2026-06-03 14:55:53.302970 Cross-site Scripting in Janobe products
HIGH (7.1)
Cross-Site Scripting (XSS) vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'start' parameter in '/admin/mod_reports/printreport.php'.
Published: 2024-08-06T11:05:42.363Z
Updated: 2024-08-08T14:38:43.038Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-33979 vulnerable 2026-06-03 14:55:53.302385 Cross-site Scripting in Janobe products
HIGH (7.1)
Cross-Site Scripting (XSS) vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'q', 'arrival', 'departure' and 'accomodation' parameters in '/index.php'.
Published: 2024-08-06T11:04:43.408Z
Updated: 2024-08-07T20:41:38.959Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.