CVE-2006-0201

Published: Jan 13, 2006Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Dave Nielsen and Patrick Breitenbach PayPal Web Services (aka PHP Toolkit) 0.50, and possibly earlier versions, allows remote attackers to enter false payment entries into the log file via HTTP POST requests to ipn_success.php.

Affected (1)

Products: Paypal: Php Toolkit

Paypal

1 product

Php Toolkit

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Paypal Php Toolkit	Up to 0.50

References (12)

http://secunia.com/advisories/18444

Source: cve@mitre.org

Vendor Advisory

http://www.osvdb.org/22378

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/421739

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/16218

Source: cve@mitre.org

http://www.uinc.ru/articles/vuln/ptpaypal050.shtml

Source: cve@mitre.org

Vendor Advisory

http://www.vupen.com/english/advisories/2006/0183

Source: cve@mitre.org

http://secunia.com/advisories/18444