EUVD-2012-2064

Malware in sbrugna...

CVE-2012-5797

The PayPal Pro PayFlow module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

PT-2012-6109

Name of the Vulnerable Software and Affected Versions osCommerce PayPal Pro PayFlow module affected versions not specified Description The issue concerns a failure to verify the server hostname against the domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificat...

CVE-2012-2058

The Ubercart Payflow module for Drupal does not use a secure token, which allows remote attackers to forge payments via unspecified vectors...

CVE-2012-2058

The Ubercart Payflow module for Drupal does not use a secure token, which allows remote attackers to forge payments via unspecified vectors...

PT-2012-3772

Name of the Vulnerable Software and Affected Versions Ubercart Payflow module for Drupal affected versions not specified Description The issue allows remote attackers to forge payments due to the lack of a secure token in the Ubercart Payflow module for Drupal. Recommendations At the moment, ther...

CVE-2012-2058: Undefined Security Weakness

The Ubercart Payflow module for Drupal does not use a secure token, which allows remote attackers to forge payments via unspecified vectors...