PHP Vulnerability Responses by Company

IME Khalti Limited

海外決済・API
Aliases / services
Khalti / IME Khalti Limited / IME Pay / IME Digital Solution Ltd / Khalti by IME
Official website
https://khalti.com/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Khalti Web Checkout KPG-2 for PHP

Response status
Not listed
Response information checked
2026-10-28

Current re-audit: Official sources searched; no response found · Research date: 2026-10-28

KPG-2 provides a PHP cURL example using order ID, amount and return URL; final verification uses its Lookup API.

Scope: Merchant-side PHP integration documentation was reviewed. Cloud-side PHP use and fixes for PHP2Shell or either CVE remain unconfirmed.

What users should do

Register as a merchant, test credentials and call Lookup after the callback. Fulfil only after confirming Completed.

Official service URL

Source URLs

  1. Web Checkout KPG-2https://docs.khalti.com/khalti-epayment/Service and operation documentation
Related official sources
  1. Web Checkout KPG-2Official information directory
  2. Terms & ConditionsOfficial information directory
  3. About KhaltiOfficial information directory

Comments