Paypal Ipn Project

paypal-ipn_project

1 CVE • 1 product

Products (1)

Click to collapse

Toggle

Paypal Ipn

paypal-ipn

1 CVE

CVEs (1)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2014-10067 1Paypal Ipn Project 1Paypal Ipn Nov 21, 2024 May 29, 2018 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 paypal-ipn before 3.0.0 uses the `test_ipn` parameter (which is set by the PayPal IPN simulator) to determine if it should use the production PayPal site or the sandbox. With a bit of time, an attacker could craft a requ...Show more paypal-ipn before 3.0.0 uses the `test_ipn` parameter (which is set by the PayPal IPN simulator) to determine if it should use the production PayPal site or the sandbox. With a bit of time, an attacker could craft a request using the simulator that would fool any application which does not explicitly check for test_ipn in production.Show less

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2014-10067

1Paypal Ipn Project

1Paypal Ipn

Nov 21, 2024

May 29, 2018

N/A· v4

5.9 MEDIUM· v3

4.3 MEDIUM· v2

paypal-ipn before 3.0.0 uses the `test_ipn` parameter (which is set by the PayPal IPN simulator) to determine if it should use the production PayPal site or the sandbox. With a bit of time, an attacker could craft a request using the simulator that would fool any application which does not explicitly check for test_ipn in production.Show less