CVE-2006-0202: PayPal PHP Toolkit

Low severity, CVSS 3.6. EPSS: 0.3% chance of exploitation in the next 30 days.

Dave Nielsen and Patrick Breitenbach PayPal Web Services (aka PHP Toolkit) 0.50 and possibly earlier has (1) world-readable permissions for ipn/logs/ipn_success.txt, which allows local users to view sensitive information (payment data), and (2) world-writable permissions for ipn/logs, which allows local users to delete or replace payment data.

Affected products

• PayPal PHP Toolkit: up to and including 0.50

Published 2006-01-13. Last modified 2026-06-16.