漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
漏洞
N/A
漏洞信息
An issue was discovered in the CardGate Payments plugin through 2.0.30 for Magento 2. Lack of origin authentication in the IPN callback processing function in Controller/Payment/Callback.php allows an attacker to remotely replace critical plugin settings (merchant ID, secret key, etc.) and therefore bypass the payment process (e.g., spoof an order status by manually sending an IPN callback request with a valid signature but without real payment) and/or receive all of the subsequent payments.
漏洞信息
N/A
漏洞
N/A
漏洞
Magento WooCommerce CardGate Payment Gateway 访问控制错误漏洞
漏洞信息
Magento是美国Magento公司的一套开源的PHP电子商务系统。该系统提供权限管理、搜索引擎和支付网关等功能。 Magento WooCommerce CardGate Payment Gateway 2.0.30及之前版本存在安全漏洞，该漏洞源于Controller/Payment/Callback.php文件中IPN回调处理功能没有对来源进行身份验证。远程攻击者可利用该漏洞替换掉重要的插件设置，绕过支付过程和/或接收之后所有支付的金额。
漏洞信息
N/A
漏洞
N/A