PayPal

Records26All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

PayPal records in CISA KEV

No PayPal vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Paypal 3 records LOW Braintree/sanitize-url 2 records LOW Payments Pro 2 records LOW Payments Standard 2 records LOW Php Toolkit 2 records LOW Adaptive Payments Sdk 1 record LOW Instant Payment Notification 1 record LOW Invoicing 1 record LOW

Records

2 records in Php Toolkit · all components

TI-2006-00192 CVE-2006-0201 · GHSA-6xh9-4pw7-5r88

Dave Nielsen and Patrick Breitenbach PayPal Web Services (aka PHP Toolkit) 0.50, and…

LOW 26

Dave Nielsen and Patrick Breitenbach PayPal Web Services (aka PHP Toolkit) 0.50, and possibly earlier versions, allows remote attackers to enter false payment entries into the log file via HTTP POST requests to ipn_succe…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01487 Published 2006-01-13 No fix listed

TI-2006-00193 CVE-2006-0202 · GHSA-9fj6-f968-gx6c

Dave Nielsen and Patrick Breitenbach PayPal Web Services (aka PHP Toolkit) 0.50 and…

LOW 17

Dave Nielsen and Patrick Breitenbach PayPal Web Services (aka PHP Toolkit) 0.50 and possibly earlier has (1) world-readable permissions for ipn/logs/ipn_success.txt, which allows local users to view sensitive information…

CVSS 2.0LOW 3.6 Local No auth Interaction — EPSS 0.00339 Published 2006-01-13 No fix listed

Open these records in search →

Critical	1
High	2
Medium	22
Low	1
No CVSS	0