TI-2012-04836 CVE-2012-5795 · GHSA-5rr6-rgq8-52wh
The PayPal Express module in osCommerce does not verify that the server hostname matches…
Priority LOW 27
The PayPal Express module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle at…