medium5.0
CVE-2013-0118
CS-Cart before 3.0.6, when PayPal Standard Payments is configured, allows remote attackers to set the payment recipient via a modified value of the merchant's …
Impact
CS-Cart before 3.0.6, when PayPal Standard Payments is configured, allows remote attackers to set the payment recipient via a modified value of the merchant's e-mail address, as demonstrated by setting the recipient to one's self.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cs-Cart | Cs-Cart | through 3.0.5 Versions 3.0, 3.0.2, 3.0.3, 3.0.4 |