VULNERABILITY INTELLIGENCE

CVE-2006-0202

CVSS score3.6 NONE
EPSS probability0.34%
CISA KEVNot currently listed
Published2006-01-13
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:P/I:P/A:N

Description

Dave Nielsen and Patrick Breitenbach PayPal Web Services (aka PHP Toolkit) 0.50 and possibly earlier has (1) world-readable permissions for ipn/logs/ipn_success.txt, which allows local users to view sensitive information (payment data), and (2) world-writable permissions for ipn/logs, which allows local users to delete or replace payment data.

Weakness classification

  • nvd@nist.gov: NVD-CWE-Other

Primary references