TI-2012-04833 CVE-2012-5792 · GHSA-7882-q4m2-7m5j
The Sage Pay Direct module in osCommerce does not verify that the server hostname matches…
Priority LOW 27
The Sage Pay Direct module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle a…