Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ubercart ubercart - vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2013-7302
Session fixation vulnerability in the Ubercart module 6.x-2.x prior to 6.x-2.13 and 7.x-3.x prior to 7.x-3.6 for Drupal, when the "Log in new customers after checkout" option is enabled, allows remote malicious users to hijack web sessions by leveraging knowledge of the...
Ubercart Ubercart 7.x-3.0Ubercart Ubercart 6.x-2.0Ubercart Ubercart 6.x-2.9Ubercart Ubercart 7.x-3.5Ubercart Ubercart 6.x-2.4Ubercart Ubercart 6.x-2.7Ubercart Ubercart 7.x-3.4Ubercart Ubercart 7.x-3.3Ubercart Ubercart 7.x-3.2Ubercart Ubercart 6.x-2.12Ubercart Ubercart 6.x-2.11Ubercart Ubercart 6.x-2.10Ubercart Ubercart 6.x-2.1Ubercart Ubercart 6.x-2.2Ubercart Ubercart 6.x-2.3Ubercart Ubercart 7.x-3.1Ubercart Ubercart 6.x-2.6Ubercart Ubercart 6.x-2.8
NA
CVE-2009-4771
The PayPal Website Payments Standard functionality in the Ubercart module 5.x prior to 5.x-1.9 and 6.x prior to 6.x-2.1 for Drupal does not properly validate orders, which allows remote malicious users to trigger unspecified "duplicate actions" via unknown vectors.
Ubercart Ubercart 5.x-1.8Ubercart Ubercart 5.x-1.2Ubercart Ubercart 5.x-1.1Ubercart Ubercart 5.x-1.0Ubercart Ubercart 6.x-2.0Ubercart Ubercart 5.x-1.7Ubercart Ubercart 5.x-1.6Ubercart Ubercart 5.x-1.3Ubercart Ubercart 5.x-1.5Ubercart Ubercart 5.x-1.4
NA
CVE-2009-4773
Cross-site request forgery (CSRF) vulnerability in the order-management functionality in the Ubercart module 5.x prior to 5.x-1.9 and 6.x prior to 6.x-2.1 for Drupal allows remote malicious users to hijack the authentication of unspecified victims via unknown vectors.
Ubercart Ubercart 5.x-1.2Ubercart Ubercart 5.x-1.1Ubercart Ubercart 5.x-1.0Ubercart Ubercart 6.x-2.0Ubercart Ubercart 5.x-1.5Ubercart Ubercart 5.x-1.4Ubercart Ubercart 5.x-1.3Ubercart Ubercart 5.x-1.8Ubercart Ubercart 5.x-1.7Ubercart Ubercart 5.x-1.6
NA
CVE-2009-4772
Unspecified vulnerability in the PayPal Website Payments Standard functionality in the Ubercart module 5.x prior to 5.x-1.9 and 6.x prior to 6.x-2.1 for Drupal, when a custom checkout completion message is enabled, allows malicious users to obtain sensitive information via unknow...
Ubercart Ubercart 5.x-1.5Ubercart Ubercart 5.x-1.4Ubercart Ubercart 5.x-1.0Ubercart Ubercart 6.x-2.0Ubercart Ubercart 5.x-1.8Ubercart Ubercart 5.x-1.2Ubercart Ubercart 5.x-1.1Ubercart Ubercart 5.x-1.7Ubercart Ubercart 5.x-1.6Ubercart Ubercart 5.x-1.3
NA
CVE-2014-9026
The Ubercart module 7.x-3.x prior to 7.x-3.7 for Drupal does not properly protect the per-user order history view, which allows remote authenticated users with the "view own orders" permission to obtain sensitive information via unspecified vectors.
Ubercart Ubercart 7.x-3.0Ubercart Ubercart 7.x-3.6Ubercart Ubercart 7.x-3.7Ubercart Ubercart 7.x-3.3Ubercart Ubercart 7.x-3.5Ubercart Ubercart 7.x-3.1Ubercart Ubercart 7.x-3.x-devUbercart Ubercart 7.x-3.2Ubercart Ubercart 7.x-3.4
NA
CVE-2012-2299
The Ubercart module 6.x-2.x prior to 6.x-2.8 and 7.x-3.x prior to 7.x-3.1 for Drupal stores passwords for new customers in plaintext during checkout, which allows local users to obtain sensitive information by reading from the database.
Ubercart Ubercart 6.x-2.0Ubercart Ubercart 6.x-2.7Ubercart Ubercart 6.x-2.4Ubercart Ubercart 7.x-3.0Ubercart Ubercart 6.x-2.1Ubercart Ubercart 6.x-2.3Ubercart Ubercart 6.x-2.2Ubercart Ubercart 6.x-2.6
NA
CVE-2012-2300
Multiple cross-site scripting (XSS) vulnerabilities in the Ubercart module 6.x-2.x prior to 6.x-2.8 and 7.x-3.x prior to 7.x-3.1 for Drupal allow remote authenticated users with the administer product classes permission to inject arbitrary web script or HTML via unspecified vecto...
Ubercart Ubercart 6.x-2.0Ubercart Ubercart 6.x-2.3Ubercart Ubercart 7.x-3.0Ubercart Ubercart 6.x-2.2Ubercart Ubercart 6.x-2.7Ubercart Ubercart 6.x-2.6Ubercart Ubercart 6.x-2.1Ubercart Ubercart 6.x-2.4
NA
CVE-2012-2301
The Ubercart module 6.x-2.x prior to 6.x-2.8 for Drupal allows remote authenticated users with the "administer product classes" permission to execute arbitrary PHP code via unspecified vectors.
Ubercart Ubercart 6.x-2.0Ubercart Ubercart 6.x-2.2Ubercart Ubercart 6.x-2.1Ubercart Ubercart 6.x-2.3Ubercart Ubercart 6.x-2.4Ubercart Ubercart 6.x-2.6Ubercart Ubercart 6.x-2.7
NA
CVE-2013-0322
Cross-site scripting (XSS) vulnerability in Views in the Ubercart module 7.x-3.x prior to 7.x-3.4 for Drupal allows remote malicious users to inject arbitrary web script or HTML via the full name field.
Ubercart Ubercart 7.x-3.0Ubercart Ubercart 7.x-3.1Ubercart Ubercart 7.x-3.2Ubercart Ubercart 7.x-3.3
NA
CVE-2015-4358
Cross-site scripting (XSS) vulnerability in unspecified administration pages in the Ubercart Discount Coupons module 6.x-1.x prior to 6.x-1.8 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via vectors related to taxono...
Ubercart Discount Coupons Project Ubercart Discount Coupons 6.x-1.4Ubercart Discount Coupons Project Ubercart Discount Coupons 6.x-1.5Ubercart Discount Coupons Project Ubercart Discount Coupons 6.x-1.6Ubercart Discount Coupons Project Ubercart Discount Coupons 6.x-1.7Ubercart Discount Coupons Project Ubercart Discount Coupons 6.x-1.0Ubercart Discount Coupons Project Ubercart Discount Coupons 6.x-1.2Ubercart Discount Coupons Project Ubercart Discount Coupons 6.x-1.1Ubercart Discount Coupons Project Ubercart Discount Coupons 6.x-1.3
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322cross-site request forgeryunauthorizedCVE-2024-33925reflected XSSCVE-2023-51580CVE-2023-51579CVE-2015-2051CVE-2023-51609
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook