TI-2012-04838 CVE-2012-5797 · GHSA-9qhw-fgvr-j3cm
The PayPal Pro PayFlow module in osCommerce does not verify that the server hostname…
Priority LOW 27
The PayPal Pro PayFlow module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middl…