Vulnerabilities

TI-2013-05888 CVE-2013-7202 · GHSA-m357-99gg-7rgq

The WebHybridClient class in PayPal 5.3 and earlier for Android allows remote attackers…

LOW 39

The WebHybridClient class in PayPal 5.3 and earlier for Android allows remote attackers to execute arbitrary JavaScript on the system.

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.02035 Published 2018-04-27 No fix listed CWE-264

TI-2013-05887 CVE-2013-7201 · GHSA-cjqc-xw23-pp7h

WebHybridClient.java in PayPal 5.3 and earlier for Android ignores SSL errors, which…

LOW 36

WebHybridClient.java in PayPal 5.3 and earlier for Android ignores SSL errors, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information.

CVSS 3.0HIGH 7.4 Network No auth No interaction EPSS 0.0175 Published 2018-04-27 No fix listed CWE-295

TI-2012-04843 CVE-2012-5802 · GHSA-g8fx-vvch-2699

The PayPal module in Ubercart does not verify that the server hostname matches a domain…

LOW 27

The PayPal module in Ubercart does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.0057 Published 2012-11-04 No fix listed CWE-20

Vulnerabilities

Filters

The WebHybridClient class in PayPal 5.3 and earlier for Android allows remote attackers…

WebHybridClient.java in PayPal 5.3 and earlier for Android ignores SSL errors, which…

The PayPal module in Ubercart does not verify that the server hostname matches a domain…