osCommerce PayPal Website Payments Standard Module Security Bypass Vulnerability
BID:55593
Info
osCommerce PayPal Website Payments Standard Module Security Bypass Vulnerability
| Bugtraq ID: | 55593 |
| Class: | Design Error |
| CVE: |
CVE-2012-2991 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 18 2012 12:00AM |
| Updated: | Sep 18 2012 12:00AM |
| Credit: | Giancarlo Pellegrino of SAP Research |
| Vulnerable: |
osCommerce osCommerce 2.3.1 |
| Not Vulnerable: | |
Discussion
osCommerce PayPal Website Payments Standard Module Security Bypass Vulnerability
osCommerce is prone to a security-bypass vulnerability.
An attacker can exploit this issue to purchase items without paying the merchant for them.
osCommerce 2.3.1 is vulnerable; other versions may also be affected.
osCommerce is prone to a security-bypass vulnerability.
An attacker can exploit this issue to purchase items without paying the merchant for them.
osCommerce 2.3.1 is vulnerable; other versions may also be affected.
Exploit / POC
osCommerce PayPal Website Payments Standard Module Security Bypass Vulnerability
Attackers can exploit this issue through a browser.
Attackers can exploit this issue through a browser.
Solution / Fix
osCommerce PayPal Website Payments Standard Module Security Bypass Vulnerability
Solution:
Updates are available. Please see the references for more details.
Solution:
Updates are available. Please see the references for more details.
References
osCommerce PayPal Website Payments Standard Module Security Bypass Vulnerability
References:
References:
- osCommerce Homepage (osCommerce)