Skip to content
OpenAdvisories

Vendor

Paymenter

7 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 8.5

    Paymenter: URL parameter injection bypasses paid plan limits at checkout

    Paymenter is a free and open-source webshop solution for management of hosting services. In versions prior to 1.5.1, the checkout component improperly filters URL-writable properties, allowing authenticated users to inject arbitrary key-value pairs into serve…