5 - CVE-2012-2991

Executive Summary

Informations
Name	CVE-2012-2991	First vendor Publication	2012-09-19
Vendor	Cve	Last vendor Modification	2013-03-02

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:N/I:P/A:N)
Cvss Base Score	5	Attack Range	Network
Cvss Impact Score	2.9	Attack Complexity	Low
Cvss Expoit Score	10	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

The PayPal (aka MODULE_PAYMENT_PAYPAL_STANDARD) module before 1.1 in osCommerce Online Merchant before 2.3.4 allows remote attackers to set the payment recipient via a modified value of the merchant's e-mail address, as demonstrated by setting the recipient to one's self.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2991

CPE : Common Platform Enumeration

Type	Description	Count
Application	Oscommerce Online Merchant cpe:2.3:a:oscommerce:online_merchant:2.3.2:::::::* cpe:2.3:a:oscommerce:online_merchant:2.3.1:::::::* cpe:2.3:a:oscommerce:online_merchant:2.3.0:::::::* cpe:2.3:a:oscommerce:online_merchant:2.2:::::::* cpe:2.3:a:oscommerce:online_merchant::::::::	5

Sources (Detail)

Source	Url
CERT-VN	http://www.kb.cert.org/vuls/id/459446
SECUNIA	http://secunia.com/advisories/50640

Alert History

If you want to see full details history, please login or register.

Date	Informations
2021-05-04 12:20:43	Multiple Updates
2021-04-22 01:24:45	Multiple Updates
2020-05-23 01:49:06	Multiple Updates
2020-05-23 00:34:01	Multiple Updates
2016-04-26 22:00:29	Multiple Updates
2013-05-10 22:41:04	Multiple Updates
2013-03-02 13:19:00	Multiple Updates