CVE-2012-5796

The CVE-2012-5796 entry concerns the PayPal Pro module in osCommerce failing to verify that the server hostname matches the CN/SAN in the X.509 certificate, enabling MITM via an arbitrary valid certificate. This is a TLS hostname verification flaw in the PayPal Pro module, leading to potential sp...