Search/CVE-2012-2058
● CVE

CVE-2012-2058

VendorpaypalProductubercart payflowDiscoveredSep 17, 2012UpdatedApr 29, 2026

The Ubercart Payflow module for Drupal does not use a secure token, which allows remote attackers to forge payments via unspecified vectors.

CVSS v3.1
—
EPSS
1.33%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
Connections
2 relationships
Timeline
disclosure → media coverage
Sep 17, 2012
Disclosure — published as a CVE record. · last revised by NVD Apr 29, 2026