Unrated severityNVD Advisory· Published Feb 24, 2013· Updated Apr 29, 2026
CVE-2013-0118
CVE-2013-0118
Description
CS-Cart before 3.0.6, when PayPal Standard Payments is configured, allows remote attackers to set the payment recipient via a modified value of the merchant's e-mail address, as demonstrated by setting the recipient to one's self.
Affected products
5cpe:2.3:a:cs-cart:cs-cart:*:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:cs-cart:cs-cart:*:*:*:*:*:*:*:*range: <=3.0.5
- cpe:2.3:a:cs-cart:cs-cart:3.0:*:*:*:*:*:*:*
- cpe:2.3:a:cs-cart:cs-cart:3.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:cs-cart:cs-cart:3.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:cs-cart:cs-cart:3.0.4:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- www.kb.cert.org/vuls/id/583564nvdUS Government Resource
- www.kb.cert.org/vuls/id/BLUU-949PQLnvd
News mentions
0No linked articles in our index yet.