← Back

Paypal Ipn

paypal-ipn

Vendor: Paypal Ipn Project • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2014-10067
1Paypal Ipn Project
1Paypal Ipn
Nov 21, 2024
May 29, 2018
N/A· v4
5.9 MEDIUM· v3
4.3 MEDIUM· v2
paypal-ipn before 3.0.0 uses the `test_ipn` parameter (which is set by the PayPal IPN simulator) to determine if it should use the production PayPal site or the sandbox. With a bit of time, an attacker could craft a requ...Show more
paypal-ipn before 3.0.0 uses the `test_ipn` parameter (which is set by the PayPal IPN simulator) to determine if it should use the production PayPal site or the sandbox. With a bit of time, an attacker could craft a request using the simulator that would fool any application which does not explicitly check for test_ipn in production.Show less