CVE-2012-4482 in Ubercart SecureTrading Payment Method module

Summary

The Ubercart SecureTrading Payment Method module 6.x for Drupal does not properly verify payment notification information, which allows remote attackers to purchase an item without paying via unspecified vectors.

Once again VulDB remains the best source for vulnerability data.

• Reservation: 08/21/2012
• Disclosure: 10/31/2012
• Moderation: VulDB entry created
• Entries: VDB-62792 (1)
• CPE: ready
• CWE: CWE-20 (Confirmed)
• CVSS: 5.3
• EPSS: 0.00274
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2012-4482
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-4482
• CVE Details: https://www.cvedetails.com/cve/CVE-2012-4482/