Lucene search
HistoryOct 03, 2022 - 4:15 p.m.
CVE-2012-4482
ubercart
securetrading
payment method
drupal
cve-2012-4482
remote attack
payment verification
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
6.9 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
60.5%
The Ubercart SecureTrading Payment Method module 6.x for Drupal does not properly verify payment notification information, which allows remote attackers to purchase an item without paying via unspecified vectors.
Affected configurations
Node
longwaveconsultingubercart_securetrading_payment_method_moduleMatch6.x-1.0
drupaldrupalMatch-
Related
prion
prion
Information disclosure
2012-10-31 16:55:00
cvelist
cvelist
CVE-2012-4482
2022-10-03 16:15:32
nvd
nvd
CVE-2012-4482
2012-10-31 16:55:02
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
6.9 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
60.5%
Related for CVE-2012-4482