TomatoCart PayPal Express Checkout Module Security Bypass Vulnerability
BID:56333
Info
TomatoCart PayPal Express Checkout Module Security Bypass Vulnerability
| Bugtraq ID: | 56333 |
| Class: | Design Error |
| CVE: |
CVE-2012-4934 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 30 2012 12:00AM |
| Updated: | Oct 30 2012 12:00AM |
| Credit: | Giancarlo Pellegrino |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
TomatoCart PayPal Express Checkout Module Security Bypass Vulnerability
TomatoCart is prone to a security-bypass vulnerability.
An attacker can exploit this issue to purchase items for free or at a reduced price.
TomatoCart 1.1.7 is vulnerable; other versions may also be affected.
TomatoCart is prone to a security-bypass vulnerability.
An attacker can exploit this issue to purchase items for free or at a reduced price.
TomatoCart 1.1.7 is vulnerable; other versions may also be affected.
Exploit / POC
TomatoCart PayPal Express Checkout Module Security Bypass Vulnerability
Attackers can exploit this issue through a browser.
Attackers can exploit this issue through a browser.
Solution / Fix
TomatoCart PayPal Express Checkout Module Security Bypass Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
References
TomatoCart PayPal Express Checkout Module Security Bypass Vulnerability
References:
References:
- Vendor Homepage (TomatoCart)