← Back

Website Payments Standard Module

website_payments_standard_module

Vendor: Paypal • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2012-2991
2Oscommerce
Paypal
2Online Merchant
Website Payments Standard Module
Apr 29, 2026
Sep 19, 2012
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The PayPal (aka MODULE_PAYMENT_PAYPAL_STANDARD) module before 1.1 in osCommerce Online Merchant before 2.3.4 allows remote attackers to set the payment recipient via a modified value of the merchant's e-mail address, as...Show more
The PayPal (aka MODULE_PAYMENT_PAYPAL_STANDARD) module before 1.1 in osCommerce Online Merchant before 2.3.4 allows remote attackers to set the payment recipient via a modified value of the merchant's e-mail address, as demonstrated by setting the recipient to one's self.Show less