PHP Vulnerability Responses by Company

Công ty Cổ phần Dịch vụ Di động Trực tuyến

海外決済・API
Aliases / services
M_Service / M-Service / Công ty Cổ phần Dịch vụ Di Động Trực tuyến / MoMo (Vietnam) / Công ty Cổ phần Dịch vụ Di động Trực tuyến
Official website
https://www.momo.vn/
Sources identifying the operating company

Vietnamese MoMo provider, distinct from namesake services in other countries.

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

MoMo Mini App Open API（PHP signature example）

Response status
Not listed
Response information checked
2026-10-28

Current re-audit: Official sources searched; no response found · Research date: 2026-10-28

Mini App Open API provides a PHP signing example using private keys, OP-Signature and millisecond timestamps, with public-key response verification.

Scope: Official merchant-side PHP integration was reviewed. Cloud-side PHP use and fixes for PHP2Shell or either CVE remain unconfirmed.

What users should do

Configure credentials for the selected Open API, implement request signing and response validation, and test; do not generalize this scheme to every payment API.

Official service URL

Source URLs

  1. Open API Securityhttps://developers.momo.vn/v3/docs/app-center/development-guideline/components-api-sdk/open-api/open-api-security/Service and operation documentation
Related official sources
  1. Open API SecurityOfficial information directory
  2. About MoMoOfficial information directory
  3. MoMo company announcementOfficial information directory

Comments