GCVE-110-CERTCC-2012-207540

Advisory PublishedCVSS 6.8/10

Vulnetix · Advisory published October 8, 2012

TomatoCart 1.1.7 with PayPal Express Checkout, and possibly other versions, contains a design flaw that may allow an attacker to purchase items for free or less than advertised.

Download JSON Open in Console

Risk Scores

CVSS 2.0

6.8/10

Medium · AV:N/AC:L/Au:S/C:N/I:C/A:N

certcc-cam

impact0population0exploitation0widely_known0score_current0ease_of_exploitation0

certcc-vrda

d1_impact3d1_population3d1_direct_report1

certcc-cvss-temporal-env

temporal_score5.5remediation_levelUreport_confidenceUCenvironmental_score5.5target_distributionNDenvironmental_vectorCDP:ND/TD:ND/CR:ND/IR:ND/AR:ND

Aliases

CVE-2012-4934

Transitive aliases

GSD-2012-4934 GHSA-hcxg-jpg7-wqg9

References

TomatoCart with PayPal Express Checkout design flaw vulnerability

url

TomatoCart with PayPal Express Checkout design flaw vulnerability

url

TomatoCart with PayPal Express Checkout design flaw vulnerability

advisory

Browse GCVE Records

73,040 records in the GCVE database · Updated July 15, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON