Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
ubercart ubercart 6.x-2.0 vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2012-2301
The Ubercart module 6.x-2.x prior to 6.x-2.8 for Drupal allows remote authenticated users with the "administer product classes" permission to execute arbitrary PHP code via unspecified vectors.
Ubercart Ubercart 6.x-2.0
Ubercart Ubercart 6.x-2.2
Ubercart Ubercart 6.x-2.1
Ubercart Ubercart 6.x-2.3
Ubercart Ubercart 6.x-2.4
Ubercart Ubercart 6.x-2.6
Ubercart Ubercart 6.x-2.7
NA
CVE-2012-2299
The Ubercart module 6.x-2.x prior to 6.x-2.8 and 7.x-3.x prior to 7.x-3.1 for Drupal stores passwords for new customers in plaintext during checkout, which allows local users to obtain sensitive information by reading from the database.
Ubercart Ubercart 6.x-2.0
Ubercart Ubercart 6.x-2.7
Ubercart Ubercart 6.x-2.4
Ubercart Ubercart 7.x-3.0
Ubercart Ubercart 6.x-2.1
Ubercart Ubercart 6.x-2.3
Ubercart Ubercart 6.x-2.2
Ubercart Ubercart 6.x-2.6
NA
CVE-2012-2300
Multiple cross-site scripting (XSS) vulnerabilities in the Ubercart module 6.x-2.x prior to 6.x-2.8 and 7.x-3.x prior to 7.x-3.1 for Drupal allow remote authenticated users with the administer product classes permission to inject arbitrary web script or HTML via unspecified vecto...
Ubercart Ubercart 6.x-2.0
Ubercart Ubercart 6.x-2.3
Ubercart Ubercart 7.x-3.0
Ubercart Ubercart 6.x-2.2
Ubercart Ubercart 6.x-2.7
Ubercart Ubercart 6.x-2.6
Ubercart Ubercart 6.x-2.1
Ubercart Ubercart 6.x-2.4
NA
CVE-2009-4771
The PayPal Website Payments Standard functionality in the Ubercart module 5.x prior to 5.x-1.9 and 6.x prior to 6.x-2.1 for Drupal does not properly validate orders, which allows remote malicious users to trigger unspecified "duplicate actions" via unknown vectors.
Ubercart Ubercart 5.x-1.8
Ubercart Ubercart 5.x-1.2
Ubercart Ubercart 5.x-1.1
Ubercart Ubercart 5.x-1.0
Ubercart Ubercart 6.x-2.0
Ubercart Ubercart 5.x-1.7
Ubercart Ubercart 5.x-1.6
Ubercart Ubercart 5.x-1.3
Ubercart Ubercart 5.x-1.5
Ubercart Ubercart 5.x-1.4
NA
CVE-2009-4772
Unspecified vulnerability in the PayPal Website Payments Standard functionality in the Ubercart module 5.x prior to 5.x-1.9 and 6.x prior to 6.x-2.1 for Drupal, when a custom checkout completion message is enabled, allows malicious users to obtain sensitive information via unknow...
Ubercart Ubercart 5.x-1.5
Ubercart Ubercart 5.x-1.4
Ubercart Ubercart 5.x-1.0
Ubercart Ubercart 6.x-2.0
Ubercart Ubercart 5.x-1.8
Ubercart Ubercart 5.x-1.2
Ubercart Ubercart 5.x-1.1
Ubercart Ubercart 5.x-1.7
Ubercart Ubercart 5.x-1.6
Ubercart Ubercart 5.x-1.3
NA
CVE-2009-4773
Cross-site request forgery (CSRF) vulnerability in the order-management functionality in the Ubercart module 5.x prior to 5.x-1.9 and 6.x prior to 6.x-2.1 for Drupal allows remote malicious users to hijack the authentication of unspecified victims via unknown vectors.
Ubercart Ubercart 5.x-1.2
Ubercart Ubercart 5.x-1.1
Ubercart Ubercart 5.x-1.0
Ubercart Ubercart 6.x-2.0
Ubercart Ubercart 5.x-1.5
Ubercart Ubercart 5.x-1.4
Ubercart Ubercart 5.x-1.3
Ubercart Ubercart 5.x-1.8
Ubercart Ubercart 5.x-1.7
Ubercart Ubercart 5.x-1.6
NA
CVE-2013-7302
Session fixation vulnerability in the Ubercart module 6.x-2.x prior to 6.x-2.13 and 7.x-3.x prior to 7.x-3.6 for Drupal, when the "Log in new customers after checkout" option is enabled, allows remote malicious users to hijack web sessions by leveraging knowledge of the...
Ubercart Ubercart 7.x-3.0
Ubercart Ubercart 6.x-2.0
Ubercart Ubercart 6.x-2.9
Ubercart Ubercart 7.x-3.5
Ubercart Ubercart 6.x-2.4
Ubercart Ubercart 6.x-2.7
Ubercart Ubercart 7.x-3.4
Ubercart Ubercart 7.x-3.3
Ubercart Ubercart 7.x-3.2
Ubercart Ubercart 6.x-2.12
Ubercart Ubercart 6.x-2.11
Ubercart Ubercart 6.x-2.10
Ubercart Ubercart 6.x-2.1
Ubercart Ubercart 6.x-2.2
Ubercart Ubercart 6.x-2.3
Ubercart Ubercart 7.x-3.1
Ubercart Ubercart 6.x-2.6
Ubercart Ubercart 6.x-2.8
NA
CVE-2012-2731
The Ubercart AJAX Cart 6.x-2.x prior to 6.x-2.1 for Drupal stores the PHP session id in the JavaScript settings array in page loads, which might allow remote malicious users to obtain sensitive information by sniffing or reading the cache of the HTML of a webpage.
Richardo Ante Ubercart Ajax Cart 6.x-2.0
NA
CVE-2012-2074
Unspecified vulnerability in certain default views in the Ubercart Views module 6.x prior to 6.x-3.2 for Drupal allows remote malicious users to obtain sensitive information via unknown attack vectors.
Ubercart Views Project Uc Views 6.x-3.x
Ubercart Views Project Uc Views 6.x-2.0
Ubercart Views Project Uc Views 6.x-3.1
Ubercart Views Project Uc Views 6.x-3.0
Ubercart Views Project Uc Views 6.x-1.1
Ubercart Views Project Uc Views 6.x-1.0
Ubercart Views Project Uc Views 6.x-1.x
NA
CVE-2013-0321
Cross-site scripting (XSS) vulnerability in Views in the Ubercart Views (uc_views) module 6.x prior to 6.x-3.3 for Drupal allows remote malicious users to inject arbitrary web script or HTML via the full name field.
Ubercart Views Project Uc Views 6.x-3.2
Ubercart Views Project Uc Views 6.x-3.0
Ubercart Views Project Uc Views 6.x-1.x
Ubercart Views Project Uc Views 6.x-3.x
Ubercart Views Project Uc Views 6.x-2.0
Ubercart Views Project Uc Views 6.x-1.1
Ubercart Views Project Uc Views 6.x-1.0
Ubercart Views Project Uc Views 6.x-3.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-4463
CVE-2024-29895
inject
CVE-2023-52689
CVE-2024-5049
CVE-2024-5051
privilege escalation
physical
CVE-2023-52676
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started