Lucene search
PRIOn knowledge basePRION:CVE-2014-10067HistoryMay 29, 2018 - 8:29 p.m.
Design/Logic Flaw
2018-05-2920:29:00
PRIOn knowledge base
www.prio-n.com
5
paypal-ipn before 3.0.0 uses the test_ipn parameter (which is set by the PayPal IPN simulator) to determine if it should use the production PayPal site or the sandbox. With a bit of time, an attacker could craft a request using the simulator that would fool any application which does not explicitly check for test_ipn in production.
| CPE | Name | Operator | Version |
|---|---|---|---|
| paypal-ipn | lt | 3.0.0 |
Related
osv
osv
Validation Bypass in paypal-ipn
2020-08-31 22:54:56
cvelist
cvelist
CVE-2014-10067
2018-04-26 00:00:00
cve
cve
CVE-2014-10067
2018-05-29 20:29:00
github
github
Validation Bypass in paypal-ipn
2020-08-31 22:54:56
nodejs
nodejs
Validation Bypass
2015-10-17 19:41:46
nvd
nvd
CVE-2014-10067
2018-05-29 20:29:00