CVE-2006-0201: Medium severity Paypal PHP Toolkit vulnerability
Published Jan 13, 2006
·Updated
Dave Nielsen and Patrick Breitenbach PayPal Web Services (aka PHP Toolkit) 0.50, and possibly earlier versions, allows remote attackers to enter false payment entries into the log file via HTTP POST requests to ipnsuccess.php.
Affected Software
1 affected component
Paypal PHP Toolkit<=0.50
Event History
Jan 13, 2006
CVE Published
11:03 PM
Jan 14, 2006
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-0201?
CVE-2006-0201 is classified as a medium severity vulnerability due to its potential to allow unauthorized payment logging.
2
How do I fix CVE-2006-0201?
To address CVE-2006-0201, upgrade to a version of PayPal PHP Toolkit that is newer than 0.50.
3
What impact does CVE-2006-0201 have?
CVE-2006-0201 allows remote attackers to manipulate payment logs, which can lead to fraudulent entries.
4
Which versions are affected by CVE-2006-0201?
CVE-2006-0201 affects PayPal PHP Toolkit version 0.50 and possibly earlier versions.
5
Is CVE-2006-0201 a web-based vulnerability?
Yes, CVE-2006-0201 is a web-based vulnerability that involves HTTP POST requests.