Payflow Pro Express Checkout
1 CVEs
product
Monthly
The PayPal Pro PayFlow EC module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which. Rated medium severity (CVSS 5.8), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.
Information Disclosure
Oscommerce
Payflow Pro Express Checkout
NVD
CVSS 2.0
5.8
EPSS
0.1%
EPSS 0%
CVSS 5.8
MEDIUM
POC
This Month
The PayPal Pro PayFlow EC module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which. Rated medium severity (CVSS 5.8), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.
Information Disclosure
Oscommerce
Payflow Pro Express Checkout
NVD