medium5.0
CVE-2012-4482
The Ubercart SecureTrading Payment Method module 6.x for Drupal does not properly verify payment notification information, which allows remote attackers to pur…
Impact
The Ubercart SecureTrading Payment Method module 6.x for Drupal does not properly verify payment notification information, which allows remote attackers to purchase an item without paying via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Longwaveconsulting | Ubercart Securetrading Payment Method Module | Version 6.x-1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://drupal.org/node/1679820
- http://www.openwall.com/lists/oss-security/2012/10/04/6
- http://www.openwall.com/lists/oss-security/2012/10/07/1
- http://drupal.org/node/1679820
- http://www.openwall.com/lists/oss-security/2012/10/04/6
- http://www.openwall.com/lists/oss-security/2012/10/07/1