CVE-2004-1209

Verisign Payflow Link, when running with empty Accepted URL fields, does not properly verify the data in the hidden AMOUNT field, which allows remote attackers…

published December 15, 2004

CVSS
—
EPSS
1%
Percentile
63.5
In the wild
Unconfirmed
What it is

Verisign Payflow Link, when running with empty Accepted URL fields, does not properly verify the data in the hidden AMOUNT field, which allows remote attackers to modify the price of the items that they purchase.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01041 · 63.5th percentile
Published
2004-12-15T05:00Z
EPSS history
Timeline
  • 15 DEC 05:00Z
    Verisign Payflow Link, when running with empty Accepted URL fields, does not properly verify the data in the hidden AMOUNT field, which allows remote attackers…
    cvelistv5