PayPal Persistent Listing Cross Site Scripting

Title: ====== Paypal BugBounty 2 - Persistent Listing Web Vulnerability Date: ===== 2012-11-26 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=634 VL-ID: ===== 634 Common Vulnerability Scoring System: ==================================== 4 Introduction: =============...

Paypal BBP #2 - Persistent Listing Web Vulnerability

Document Title: =============== Paypal BBP 2 - Persistent Listing Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=634 Release Date: ============= 2012-11-25 Vulnerability Laboratory ID VL-ID: ==================================== 634...

Paypal Bug Bounty #21 - Persistent Encoding Vulnerability

Document Title: =============== Paypal Bug Bounty 21 - Persistent Encoding Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=684 Release Date: ============= 2012-11-24 Vulnerability Laboratory ID VL-ID: ==================================== 68...

Paypal Bug Bounty #21 - Persistent Encoding Vulnerability

Document Title: =============== Paypal Bug Bounty 21 - Persistent Encoding Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=684 Release Date: ============= 2012-11-24 Vulnerability Laboratory ID VL-ID: ==================================== 68...

Paypal Bug Bounty #27 - Community Web Vulnerability

Document Title: =============== Paypal Bug Bounty 27 - Community Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=704 Release Date: ============= 2012-11-23 Vulnerability Laboratory ID VL-ID: ==================================== 704 Comm...

Paypal Bug Bounty #27 - Community Web Vulnerability

Document Title: =============== Paypal Bug Bounty 27 - Community Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=704 Release Date: ============= 2012-11-23 Vulnerability Laboratory ID VL-ID: ==================================== 704 Comm...

Attackers Had Access for Months in South Carolina Data Breach

Attackers had two months of unfettered access to South Carolina’s Department of Revenue systems in a classic targeted attack that began with a phishing email and ended with the loss of electronic tax return data, and payment card and personal information on 3.8 million filers, possibly dating bac...

Paypal Bug Bounty #11 - Redirection Web Vulnerability

Document Title: =============== Paypal Bug Bounty 11 - Redirection Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=648 Release Date: ============= 2012-11-21 Vulnerability Laboratory ID VL-ID: ==================================== 648...

WeBid <= 1.0.5 Directory Traversal Vulnerability

Exploit for php platform in category web applications Author: loneferret of Offensive Security Product: WeBid Version: 1.0.4 & 1.0.5 and maybe older versions Vendor Site: http://www.webidsupport.com Software Download:...

weBid 1.0.5 - Directory Traversal

weBid 1.0.5 - Directory Traversal Author: loneferret of Offensive Security Product: WeBid Version: 1.0.4 & 1.0.5 and maybe older versions Vendor Site: http://www.webidsupport.com Software Download:...

CVE-2012-4482

The Ubercart SecureTrading Payment Method module 6.x for Drupal does not properly verify payment notification information, which allows remote attackers to purchase an item without paying via unspecified vectors...

Information disclosure

The Ubercart SecureTrading Payment Method module 6.x for Drupal does not properly verify payment notification information, which allows remote attackers to purchase an item without paying via unspecified vectors...

CVE-2012-4482

The Ubercart SecureTrading Payment Method module 6.x for Drupal does not properly verify payment notification information, which allows remote attackers to purchase an item without paying via unspecified vectors...

CVE-2012-4482

CVE-2012-4482 affects the Ubercart SecureTrading Payment Method module 6.x for Drupal. The root cause is that payment notification information is not properly verified, enabling remote attackers to complete a purchase without payment via unspecified vectors. The connected sources (including NVD a...

CVE-2012-4934

TomatoCart 1.1.7, when the PayPal Express Checkout module is enabled in sandbox mode, allows remote authenticated users to bypass intended payment requirements by modifying a certain redirection URL...

Design/Logic Flaw

TomatoCart 1.1.7, when the PayPal Express Checkout module is enabled in sandbox mode, allows remote authenticated users to bypass intended payment requirements by modifying a certain redirection URL...

CVE-2012-4934

TomatoCart 1.1.7, when the PayPal Express Checkout module is enabled in sandbox mode, allows remote authenticated users to bypass intended payment requirements by modifying a certain redirection URL...

PT-2012-5668

Name of the Vulnerable Software and Affected Versions TomatoCart version 1.1.7 Description The issue allows remote authenticated users to bypass intended payment requirements. This is possible when the PayPal Express Checkout module is enabled in sandbox mode, and a certain redirection URL is...

CVE-2012-4482: Improper Input Validation

The Ubercart SecureTrading Payment Method module 6.x for Drupal does not properly verify payment notification information, which allows remote attackers to purchase an item without paying via unspecified vectors...

PT-2012-5428

Name of the Vulnerable Software and Affected Versions Ubercart SecureTrading Payment Method module version 6.x Description The issue is related to the improper verification of payment notification information. This allows remote attackers to purchase items without making a payment, although the...