Webseries Payment Application does not properly restrict privileged operations, which allows remote authenticated users to gain privileges by directly accessing certain URLs.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Webseries_payment_application | Bottomline | 4.0 (including) | 4.0 (including) |