CVE-2011-5238

Published: Nov 6, 2012Modified: Apr 29, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

google-checkout-php-sample-code before 1.3.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.

Affected (7)

Products: Google: Checkout Php

Google

1 product

Checkout Php

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Google Checkout Php	Up to 1.3.1
Google Checkout Php	Version 1.2.1 beta
Google Checkout Php	Version 1.2.5
Google Checkout Php	Version 1.2.5a
Google Checkout Php	Version 1.2
Google Checkout Php	Version 1.2 beta
Google Checkout Php	Version 1.3.0