CVE-2017-6215

paypal/permissions-sdk-php is vulnerable to reflected XSS in the samples/GetAccessToken.php verification_code parameter, resulting in code execution.

• CWE-79

• https://github.com/paypal/permissions-sdk-php/issues/19Exploit, Issue Tracking, Third Party Advisory
• https://github.com/paypal/permissions-sdk-php/issues/19Exploit, Issue Tracking, Third Party Advisory

Published

Aug 2, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-6209Stack-based buffer overflow in the parse_identifier function…
• CVE-2017-6210The vrend_decode_reset function in vrend_decode.c in virglre…
• CVE-2017-6211In Android for MSM, Firefox OS for MSM, QRD Android, with al…
• CVE-2017-6212Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2017-6213paypal/invoice-sdk-php is vulnerable to reflected XSS in sam…
• CVE-2017-6214The tcp_splice_read function in net/ipv4/tcp.c in the Linux …
• CVE-2017-6216novaksolutions/infusionsoft-php-sdk v2016-10-31 is vulnerabl…
• CVE-2017-6217paypal/adaptivepayments-sdk-php v3.9.2 is vulnerable to a re…
• CVE-2017-6223Ruckus Wireless Zone Director Controller firmware releases Z…
• CVE-2017-6224Ruckus Wireless Zone Director Controller firmware releases Z…
• CVE-2017-6225Cross-site scripting (XSS) vulnerability in the web-based ma…
• CVE-2017-6227A vulnerability in the IPv6 stack on Brocade Fibre Channel S…