PT-2021-10946 · Phpyun · Phpyun

Published 2021-05-21 · Updated 2021-05-27 · CVE-2020-23768

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: PHPPYUN versions prior to 5.0.1

Description: An information disclosure issue was found in the log file of the Alibaba payment interface, specifically in alipay function.php. This issue could allow attackers to obtain users' personally identifiable information, including email addresses and telephone numbers.

Recommendations: For versions prior to 5.0.1, update to version 5.0.1 or later to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2020-23768

Affected Products

Phpyun

References · 3

• 🔥❌ https://github.com/whiskey-jj/w2s2x2222.github.io/issues/1 · Exploit, Deleted
• https://osv.dev/vulnerability/CVE-2020-23768 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-23768 · Security Note