Webseries Payment Application does not properly restrict privileged operations, which allows remote authenticated users to gain privileges by directly accessing certain URLs.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Webseries_payment_application | Bottomline | 4.0 (including) | 4.0 (including) |