low3.5
CVE-2012-4934
TomatoCart 1.1.7, when the PayPal Express Checkout module is enabled in sandbox mode, allows remote authenticated users to bypass intended payment requirements…
Impact
TomatoCart 1.1.7, when the PayPal Express Checkout module is enabled in sandbox mode, allows remote authenticated users to bypass intended payment requirements by modifying a certain redirection URL.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tomatocart | Tomatocart | Version 1.1.7 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/86883
- http://www.kb.cert.org/vuls/id/207540
- http://www.securityfocus.com/bid/56333
- https://exchange.xforce.ibmcloud.com/vulnerabilities/79696
- http://osvdb.org/86883
- http://www.kb.cert.org/vuls/id/207540
- http://www.securityfocus.com/bid/56333
- https://exchange.xforce.ibmcloud.com/vulnerabilities/79696