CVE-2014-10067

CVE-2014-10067 describes a vulnerability in paypal-ipn before version 3.0.0, where the application improperly uses the test_ipn parameter to distinguish between production and sandbox environments. An attacker could exploit this by crafting a request from the PayPal IPN simulator, potentially tricking applications that don't explicitly validate this parameter. This medium-severity vulnerability (CVSS 5.9) has a network attack vector and high confidentiality impact, but requires high attack complexity. There is no evidence of active exploitation, public exploit code, or significant community discussion, suggesting a low current threat level.