Vulnerability Details CVE-2012-4482
The Ubercart SecureTrading Payment Method module 6.x for Drupal does not properly verify payment notification information, which allows remote attackers to purchase an item without paying via unspecified vectors.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 50.6%
CVSS Severity
CVSS v2 Score 5.0
References
Products affected by CVE-2012-4482
-
cpe:2.3:a:drupal:drupal:-
-
cpe:2.3:a:longwaveconsulting:ubercart_securetrading_payment_method_module:6.x-1.0