PHP Vulnerability Responses by Company

VNPAY

海外決済・API
Aliases / services
Vietnam Payment Solution Joint Stock Company / Công ty Cổ phần Giải pháp Thanh toán Việt Nam / VNPAY
Official website
https://vnpay.vn/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

VNPAY Payment Gateway PHP integration

Response status
Not listed
Response information checked
2026-10-26

Current re-audit: Source inaccessible; on hold · Research date: 2026-10-28

Official PHP examples and sandbox documents specify vnp_TmnCode, HashSecret, payment URLs and query/refund APIs.

Scope: Official merchant-side PHP integration was reviewed. Cloud-side PHP use and fixes for PHP2Shell or either CVE remain unconfirmed.

Some official sources could not be retrieved. Reverification remains on hold and the previous verification date is retained.

What users should do

Obtain website credentials, expose the payment-notification URL and test PHP signing and status handling in sandbox.

Official service URL

Source URLs

  1. Payment Gateway introductionhttps://sandbox.vnpayment.vn/apis/docs/gioi-thieu/Service and operation documentation
  2. VNPAY payment integrationhttps://sandbox.vnpayment.vn/apis/docs/thanh-toan-pay/pay.htmlService and operation documentation
Related official sources
  1. Payment Gateway introductionOfficial information directory
  2. VNPAY payment integrationOfficial information directory
  3. VNPAY company websiteOfficial information directory

Comments