Skip to content
OpenAdvisories

Archive

12 July 2026

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2026-15502 Public exploit

    AojiaoZero Antaris PayPal IPN Payment ipn.php _rewardPurchase sql injection

    A vulnerability was detected in AojiaoZero Antaris 1.0. This affects the function _rewardPurchase of the file /ipn.php of the component PayPal IPN Payment Handler. The manipulation of the argument item_number results in sql injection. The attack may be perfor…