EUVD-2012-5679

Malware in sbrugna...

CVE-2012-5799

The Canada Post aka CanadaPost module in PrestaShop does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate,...

PT-2012-6111

Name of the Vulnerable Software and Affected Versions PrestaShop affected versions not specified Description The issue concerns the Canada Post module in PrestaShop, which fails to verify the server hostname against the domain name in the subject's Common Name CN or subjectAltName field of the...