Unscored CVE-2012-2058 EUVD-2012-2064GHSA-464x-pxv9-7m7h

The Ubercart Payflow module for Drupal does not use a secure token, which allows remote attackers to forge payments via unspecified vectors.

Published Sep 17, 2012 · Updated Aug 6, 2024 · Assigned by redhat

Category: Web / CMS

Description

The Ubercart Payflow module for Drupal does not use a secure token, which allows remote attackers to forge payments via unspecified vectors.

References

http://drupal.org/node/1482126
ubercart-payflow-drupal-weak-security(74055) vdb-entry
52502 vdb-entry
[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments) mailing-list