RSS   Vulnerabilities for 'Instant payment notification'   RSS

2012-11-04
 
CVE-2012-5805

CWE-20
 

 
The PayPal IPN functionality in Zen Cart does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, a different vulnerability than CVE-2012-5806.

 

 >>> Vendor: Paypal 19 Products
Php toolkit
Ubercart payflow
Website payments standard module
Mass pay
Payments pro
Transactional information soap
Merchant sdk
IPN
Payments standard
Invoicing
Paypal pro
Payflow pro express checkout
Paypal
Instant payment notification
Wps toolkit
Merchant-sdk-php
Php invoice sdk
Php permissions sdk
Adaptive payments sdk


Copyright 2024, cxsecurity.com

 

Back to Top