528 matches found
CVE-2012-4934: Undefined Security Weakness
TomatoCart 1.1.7, when the PayPal Express Checkout module is enabled in sandbox mode, allows remote authenticated users to bypass intended payment requirements by modifying a certain redirection URL...
CVE-2008-7310
Spree 0.2.0 does not properly restrict the use of a hash to provide values for a model's attributes, which allows remote attackers to set the Order state value and bypass the intended payment step via a modified URL, related to a "mass assignment" vulnerability...
Thelia 1.3.5 - Multiple Vulnerabilities
!/usr/bin/php | | URL: http://blackh.free.fr - http://blackh.eu | ======================================================================== | $system $argv0 -url -a -n -f | | Notes: -url ex: http://victim.com/site/ | | -a 1 : Validate Command without Payment | | -n Commmand number ex: CDE5627JOC |...
phpCoupon - Remote Payment Bypass
phpCoupon - Remote Payment Bypass source: https://www.securityfocus.com/bid/25116/info phpCoupon is prone to a remote payment-bypass vulnerability because the application fails to properly secure PayPal payment transactions. Successfully exploiting this issue allows remote attackers to perform...
[SA19626] Aweb Scripts Seller Payment Bypass Security Issue
TITLE: Aweb Scripts Seller Payment Bypass Security Issue SECUNIA ADVISORY ID: SA19626 VERIFY ADVISORY: http://secunia.com/advisories/19626/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: Aweb Scripts Seller http://secunia.com/product/9350/ DESCRIPTION: benozor7...
CVE-2000-0288
CVE-2000-0288 affects Infonautics getdoc.cgi. The vulnerability allows remote attackers to bypass the payment phase for accessing documents by altering a form variable. The available sources confirm the existence and description of this issue but do not provide concrete details on affected versio...