CVE-2012-2058: PayPal Ubercart Payflow

Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days.

The Ubercart Payflow module for Drupal does not use a secure token, which allows remote attackers to forge payments via unspecified vectors.

Affected products

• PayPal Ubercart Payflow: affected versions not specified

Published 2012-09-17. Last modified 2026-06-16.