CVE-2006-0201

Description

Dave Nielsen and Patrick Breitenbach PayPal Web Services (aka PHP Toolkit) 0.50, and possibly earlier versions, allows remote attackers to enter false payment entries into the log file via HTTP POST requests to ipn_success.php.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-0209

http://www.vupen.com/english/advisories/2006/0183

http://www.uinc.ru/articles/vuln/ptpaypal050.shtml

http://www.securityfocus.com/bid/16218

http://www.securityfocus.com/archive/1/421739

http://www.osvdb.org/22378

http://secunia.com/advisories/18444

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS