CVE-2013-0118

Published: Feb 24, 2013Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

CS-Cart before 3.0.6, when PayPal Standard Payments is configured, allows remote attackers to set the payment recipient via a modified value of the merchant's e-mail address, as demonstrated by setting the recipient to one's self.

Affected (5)

Products: Cs Cart: Cs Cart

Cs Cart

1 product

Cs Cart

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Cs Cart Cs Cart	Up to 3.0.5
Cs Cart Cs Cart	Version 3.0.2
Cs Cart Cs Cart	Version 3.0.3
Cs Cart Cs Cart	Version 3.0.4
Cs Cart Cs Cart	Version 3.0

Related CWEs

CWE-16

References (4)

http://www.kb.cert.org/vuls/id/583564

Source: cret@cert.org

US Government Resource

http://www.kb.cert.org/vuls/id/BLUU-949PQL

Source: cret@cert.org

http://www.kb.cert.org/vuls/id/583564

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.kb.cert.org/vuls/id/BLUU-949PQL

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.