According to Internet-monitoring company Netcraft, a security flaw on PayPal's site allowed hackers to steal credit card information from PayPal users.

woah

PayPal Fixes URL Used for Fraud - Yahoo! News