Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
ubercart ubercart 6.x-2.0 vulnerabilities and exploits
(subscribe to this query)
6
CVSSv2
CVE-2012-2301
The Ubercart module 6.x-2.x prior to 6.x-2.8 for Drupal allows remote authenticated users with the "administer product classes" permission to execute arbitrary PHP code via unspecified vectors.
Ubercart Ubercart 6.x-2.0
Ubercart Ubercart 6.x-2.2
Ubercart Ubercart 6.x-2.1
Ubercart Ubercart 6.x-2.3
Ubercart Ubercart 6.x-2.4
Ubercart Ubercart 6.x-2.6
Ubercart Ubercart 6.x-2.7
2.1
CVSSv2
CVE-2012-2299
The Ubercart module 6.x-2.x prior to 6.x-2.8 and 7.x-3.x prior to 7.x-3.1 for Drupal stores passwords for new customers in plaintext during checkout, which allows local users to obtain sensitive information by reading from the database.
Ubercart Ubercart 6.x-2.0
Ubercart Ubercart 6.x-2.7
Ubercart Ubercart 6.x-2.4
Ubercart Ubercart 7.x-3.0
Ubercart Ubercart 6.x-2.1
Ubercart Ubercart 6.x-2.3
Ubercart Ubercart 6.x-2.2
Ubercart Ubercart 6.x-2.6
2.1
CVSSv2
CVE-2012-2300
Multiple cross-site scripting (XSS) vulnerabilities in the Ubercart module 6.x-2.x prior to 6.x-2.8 and 7.x-3.x prior to 7.x-3.1 for Drupal allow remote authenticated users with the administer product classes permission to inject arbitrary web script or HTML via unspecified vecto...
Ubercart Ubercart 6.x-2.0
Ubercart Ubercart 6.x-2.3
Ubercart Ubercart 7.x-3.0
Ubercart Ubercart 6.x-2.2
Ubercart Ubercart 6.x-2.7
Ubercart Ubercart 6.x-2.6
Ubercart Ubercart 6.x-2.1
Ubercart Ubercart 6.x-2.4
6.8
CVSSv2
CVE-2009-4773
Cross-site request forgery (CSRF) vulnerability in the order-management functionality in the Ubercart module 5.x prior to 5.x-1.9 and 6.x prior to 6.x-2.1 for Drupal allows remote malicious users to hijack the authentication of unspecified victims via unknown vectors.
Ubercart Ubercart 5.x-1.2
Ubercart Ubercart 5.x-1.1
Ubercart Ubercart 5.x-1.0
Ubercart Ubercart 6.x-2.0
Ubercart Ubercart 5.x-1.5
Ubercart Ubercart 5.x-1.4
Ubercart Ubercart 5.x-1.3
Ubercart Ubercart 5.x-1.8
Ubercart Ubercart 5.x-1.7
Ubercart Ubercart 5.x-1.6
5
CVSSv2
CVE-2009-4771
The PayPal Website Payments Standard functionality in the Ubercart module 5.x prior to 5.x-1.9 and 6.x prior to 6.x-2.1 for Drupal does not properly validate orders, which allows remote malicious users to trigger unspecified "duplicate actions" via unknown vectors.
Ubercart Ubercart 5.x-1.8
Ubercart Ubercart 5.x-1.2
Ubercart Ubercart 5.x-1.1
Ubercart Ubercart 5.x-1.0
Ubercart Ubercart 6.x-2.0
Ubercart Ubercart 5.x-1.7
Ubercart Ubercart 5.x-1.6
Ubercart Ubercart 5.x-1.3
Ubercart Ubercart 5.x-1.5
Ubercart Ubercart 5.x-1.4
4.3
CVSSv2
CVE-2009-4772
Unspecified vulnerability in the PayPal Website Payments Standard functionality in the Ubercart module 5.x prior to 5.x-1.9 and 6.x prior to 6.x-2.1 for Drupal, when a custom checkout completion message is enabled, allows malicious users to obtain sensitive information via unknow...
Ubercart Ubercart 5.x-1.5
Ubercart Ubercart 5.x-1.4
Ubercart Ubercart 5.x-1.0
Ubercart Ubercart 6.x-2.0
Ubercart Ubercart 5.x-1.8
Ubercart Ubercart 5.x-1.2
Ubercart Ubercart 5.x-1.1
Ubercart Ubercart 5.x-1.7
Ubercart Ubercart 5.x-1.6
Ubercart Ubercart 5.x-1.3
6.8
CVSSv2
CVE-2013-7302
Session fixation vulnerability in the Ubercart module 6.x-2.x prior to 6.x-2.13 and 7.x-3.x prior to 7.x-3.6 for Drupal, when the "Log in new customers after checkout" option is enabled, allows remote malicious users to hijack web sessions by leveraging knowledge of the...
Ubercart Ubercart 7.x-3.0
Ubercart Ubercart 6.x-2.0
Ubercart Ubercart 6.x-2.9
Ubercart Ubercart 7.x-3.5
Ubercart Ubercart 6.x-2.4
Ubercart Ubercart 6.x-2.7
Ubercart Ubercart 7.x-3.4
Ubercart Ubercart 7.x-3.3
Ubercart Ubercart 7.x-3.2
Ubercart Ubercart 6.x-2.12
Ubercart Ubercart 6.x-2.11
Ubercart Ubercart 6.x-2.10
Ubercart Ubercart 6.x-2.1
Ubercart Ubercart 6.x-2.2
Ubercart Ubercart 6.x-2.3
Ubercart Ubercart 7.x-3.1
Ubercart Ubercart 6.x-2.6
Ubercart Ubercart 6.x-2.8
2.6
CVSSv2
CVE-2012-2731
The Ubercart AJAX Cart 6.x-2.x prior to 6.x-2.1 for Drupal stores the PHP session id in the JavaScript settings array in page loads, which might allow remote malicious users to obtain sensitive information by sniffing or reading the cache of the HTML of a webpage.
Richardo Ante Ubercart Ajax Cart 6.x-2.0
5
CVSSv2
CVE-2012-2074
Unspecified vulnerability in certain default views in the Ubercart Views module 6.x prior to 6.x-3.2 for Drupal allows remote malicious users to obtain sensitive information via unknown attack vectors.
Ubercart Views Project Uc Views 6.x-3.x
Ubercart Views Project Uc Views 6.x-2.0
Ubercart Views Project Uc Views 6.x-3.1
Ubercart Views Project Uc Views 6.x-3.0
Ubercart Views Project Uc Views 6.x-1.1
Ubercart Views Project Uc Views 6.x-1.0
Ubercart Views Project Uc Views 6.x-1.x
4.3
CVSSv2
CVE-2013-0321
Cross-site scripting (XSS) vulnerability in Views in the Ubercart Views (uc_views) module 6.x prior to 6.x-3.3 for Drupal allows remote malicious users to inject arbitrary web script or HTML via the full name field.
Ubercart Views Project Uc Views 6.x-3.2
Ubercart Views Project Uc Views 6.x-3.0
Ubercart Views Project Uc Views 6.x-1.x
Ubercart Views Project Uc Views 6.x-3.x
Ubercart Views Project Uc Views 6.x-2.0
Ubercart Views Project Uc Views 6.x-1.1
Ubercart Views Project Uc Views 6.x-1.0
Ubercart Views Project Uc Views 6.x-3.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
firewall
CVE-2024-35649
stored XSS
CVE-2022-28654
CVE-2020-35153
CVE-2024-27348
CVE-2022-28652
local users
CVE-2017-3506
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started