CVE-2013-0182

The Payment module 7.x-1.x before 7.x-1.3 for Drupal does not properly restrict access to payments, which allows remote attackers to read arbitrary payments.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:bart_feenstra:payment:*:7.x-1.0:beta2:*:*:*:*:*
cpe:2.3:a:bart_feenstra:payment:*:7.x-1.0:alpha6:*:*:*:*:*
cpe:2.3:a:bart_feenstra:payment:*:7.x-1.0:alpha1:*:*:*:*:*
cpe:2.3:a:bart_feenstra:payment:*:7.x-1.2:*:*:*:*:*:*
cpe:2.3:a:bart_feenstra:payment:*:7.x-1.1:*:*:*:*:*:*
cpe:2.3:a:bart_feenstra:payment:*:7.x-1.0:*:*:*:*:*:*
cpe:2.3:a:bart_feenstra:payment:*:7.x-1.0:alpha5:*:*:*:*:*
cpe:2.3:a:bart_feenstra:payment:*:7.x-1.0:alpha4:*:*:*:*:*
cpe:2.3:a:bart_feenstra:payment:*:7.x-1.0:alpha3:*:*:*:*:*
cpe:2.3:a:bart_feenstra:payment:*:7.x-1.0:alpha2:*:*:*:*:*
cpe:2.3:a:bart_feenstra:payment:*:7.x-1.0:beta3:*:*:*:*:*
cpe:2.3:a:bart_feenstra:payment:*:7.x-1.0:beta1:*:*:*:*:*
cpe:2.3:a:bart_feenstra:payment:*:7.x-1.x:dev:*:*:*:*:*
cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:*

Information

Published : 2013-03-27 14:55

Updated : 2013-03-27 21:00


NVD link : CVE-2013-0182

Mitre link : CVE-2013-0182


JSON object : View

CWE
CWE-264

Permissions, Privileges, and Access Controls

Advertisement

dedicated server usa

Products Affected

drupal

  • drupal

bart_feenstra

  • payment