Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
ubercart ubercart 6.x-2.1 vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2012-2301
The Ubercart module 6.x-2.x prior to 6.x-2.8 for Drupal allows remote authenticated users with the "administer product classes" permission to execute arbitrary PHP code via unspecified vectors.
Ubercart Ubercart 6.x-2.4
Ubercart Ubercart 6.x-2.7
Ubercart Ubercart 6.x-2.2
Ubercart Ubercart 6.x-2.1
Ubercart Ubercart 6.x-2.3
Ubercart Ubercart 6.x-2.6
Ubercart Ubercart 6.x-2.0
NA
CVE-2012-2299
The Ubercart module 6.x-2.x prior to 6.x-2.8 and 7.x-3.x prior to 7.x-3.1 for Drupal stores passwords for new customers in plaintext during checkout, which allows local users to obtain sensitive information by reading from the database.
Ubercart Ubercart 6.x-2.0
Ubercart Ubercart 6.x-2.1
Ubercart Ubercart 6.x-2.2
Ubercart Ubercart 6.x-2.3
Ubercart Ubercart 6.x-2.4
Ubercart Ubercart 6.x-2.6
Ubercart Ubercart 6.x-2.7
Ubercart Ubercart 7.x-3.0
NA
CVE-2012-2300
Multiple cross-site scripting (XSS) vulnerabilities in the Ubercart module 6.x-2.x prior to 6.x-2.8 and 7.x-3.x prior to 7.x-3.1 for Drupal allow remote authenticated users with the administer product classes permission to inject arbitrary web script or HTML via unspecified vecto...
Ubercart Ubercart 6.x-2.0
Ubercart Ubercart 6.x-2.1
Ubercart Ubercart 6.x-2.2
Ubercart Ubercart 6.x-2.3
Ubercart Ubercart 6.x-2.4
Ubercart Ubercart 6.x-2.6
Ubercart Ubercart 6.x-2.7
Ubercart Ubercart 7.x-3.0
NA
CVE-2013-7302
Session fixation vulnerability in the Ubercart module 6.x-2.x prior to 6.x-2.13 and 7.x-3.x prior to 7.x-3.6 for Drupal, when the "Log in new customers after checkout" option is enabled, allows remote malicious users to hijack web sessions by leveraging knowledge of the...
Ubercart Ubercart 6.x-2.0
Ubercart Ubercart 6.x-2.1
Ubercart Ubercart 6.x-2.2
Ubercart Ubercart 6.x-2.3
Ubercart Ubercart 6.x-2.4
Ubercart Ubercart 6.x-2.6
Ubercart Ubercart 6.x-2.7
Ubercart Ubercart 6.x-2.8
Ubercart Ubercart 6.x-2.9
Ubercart Ubercart 6.x-2.10
Ubercart Ubercart 6.x-2.11
Ubercart Ubercart 6.x-2.12
Ubercart Ubercart 7.x-3.0
Ubercart Ubercart 7.x-3.1
Ubercart Ubercart 7.x-3.2
Ubercart Ubercart 7.x-3.3
Ubercart Ubercart 7.x-3.4
Ubercart Ubercart 7.x-3.5
NA
CVE-2009-4771
The PayPal Website Payments Standard functionality in the Ubercart module 5.x prior to 5.x-1.9 and 6.x prior to 6.x-2.1 for Drupal does not properly validate orders, which allows remote malicious users to trigger unspecified "duplicate actions" via unknown vectors.
Ubercart Ubercart 5.x-1.0
Ubercart Ubercart 5.x-1.1
Ubercart Ubercart 5.x-1.2
Ubercart Ubercart 5.x-1.3
Ubercart Ubercart 5.x-1.4
Ubercart Ubercart 5.x-1.5
Ubercart Ubercart 5.x-1.6
Ubercart Ubercart 5.x-1.7
Ubercart Ubercart 5.x-1.8
Ubercart Ubercart 6.x-2.0
NA
CVE-2009-4773
Cross-site request forgery (CSRF) vulnerability in the order-management functionality in the Ubercart module 5.x prior to 5.x-1.9 and 6.x prior to 6.x-2.1 for Drupal allows remote malicious users to hijack the authentication of unspecified victims via unknown vectors.
Ubercart Ubercart 5.x-1.0
Ubercart Ubercart 5.x-1.1
Ubercart Ubercart 5.x-1.2
Ubercart Ubercart 5.x-1.3
Ubercart Ubercart 5.x-1.4
Ubercart Ubercart 5.x-1.5
Ubercart Ubercart 5.x-1.6
Ubercart Ubercart 5.x-1.7
Ubercart Ubercart 5.x-1.8
Ubercart Ubercart 6.x-2.0
NA
CVE-2009-4772
Unspecified vulnerability in the PayPal Website Payments Standard functionality in the Ubercart module 5.x prior to 5.x-1.9 and 6.x prior to 6.x-2.1 for Drupal, when a custom checkout completion message is enabled, allows malicious users to obtain sensitive information via unknow...
Ubercart Ubercart 5.x-1.0
Ubercart Ubercart 5.x-1.1
Ubercart Ubercart 5.x-1.2
Ubercart Ubercart 5.x-1.3
Ubercart Ubercart 5.x-1.4
Ubercart Ubercart 5.x-1.5
Ubercart Ubercart 5.x-1.6
Ubercart Ubercart 5.x-1.7
Ubercart Ubercart 5.x-1.8
Ubercart Ubercart 6.x-2.0
NA
CVE-2012-2731
The Ubercart AJAX Cart 6.x-2.x prior to 6.x-2.1 for Drupal stores the PHP session id in the JavaScript settings array in page loads, which might allow remote malicious users to obtain sensitive information by sniffing or reading the cache of the HTML of a webpage.
Richardo Ante Ubercart Ajax Cart 6.x-2.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-37316
firmware
CVE-2024-30078
CVE-2024-5995
remote code execution
logic flaw
CVE-2024-20693
CVE-2024-37315
CVE-2024-5464
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started