Vulnerabilities > Paypal > Ubercart Payflow > Medium

DATE CVE VULNERABILITY TITLE RISK
2012-09-17 CVE-2012-2058 Permissions, Privileges, and Access Controls vulnerability in Paypal Ubercart Payflow
The Ubercart Payflow module for Drupal does not use a secure token, which allows remote attackers to forge payments via unspecified vectors.
network
low complexity
paypal drupal CWE-264
5.0