Unscored severity · published Jan 13, 2006
CVE-2006-0201
Dave Nielsen and Patrick Breitenbach PayPal Web Services (aka PHP Toolkit) 0.50, and possibly earlier versions, allows remote attackers to enter false payment entries into the log…
–
CVSS
1.5%
EPSS
No
On KEV
Description
Dave Nielsen and Patrick Breitenbach PayPal Web Services (aka PHP Toolkit) 0.50, and possibly earlier versions, allows remote attackers to enter false payment entries into the log file via HTTP POST requests to ipn_success.php.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 74% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PT
Php Toolkit · Paypal
through 0.50 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-0201
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-0201
Vendor Advisory
http://secunia.com/advisories/18444
www.osvdb.org
http://www.osvdb.org/22378
Vendor Advisory
http://www.securityfocus.com/archive/1/421739
www.securityfocus.com
http://www.securityfocus.com/bid/16218
Vendor Advisory
http://www.uinc.ru/articles/vuln/ptpaypal050.shtml
www.vupen.com
http://www.vupen.com/english/advisories/2006/0183
More from Php Toolkit
–
CVE-2006-0202
Dave Nielsen and Patrick Breitenbach PayPal Web Services (aka PHP Toolkit) 0.50 and possibly earlier has (1) world-readable permissions for ipn/logs/ipn_success.txt, which allows…