Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
ubercart ubercart - vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2012-2058
The Ubercart Payflow module for Drupal does not use a secure token, which allows remote malicious users to forge payments via unspecified vectors.
Paypal Ubercart Payflow -
NA
CVE-2012-2074
Unspecified vulnerability in certain default views in the Ubercart Views module 6.x prior to 6.x-3.2 for Drupal allows remote malicious users to obtain sensitive information via unknown attack vectors.
Ubercart Views Project Uc Views 6.x-3.x
Ubercart Views Project Uc Views 6.x-2.0
Ubercart Views Project Uc Views 6.x-3.1
Ubercart Views Project Uc Views 6.x-3.0
Ubercart Views Project Uc Views 6.x-1.1
Ubercart Views Project Uc Views 6.x-1.0
Ubercart Views Project Uc Views 6.x-1.x
NA
CVE-2012-4482
The Ubercart SecureTrading Payment Method module 6.x for Drupal does not properly verify payment notification information, which allows remote malicious users to purchase an item without paying via unspecified vectors.
Longwaveconsulting Ubercart Securetrading Payment Method Module 6.x-1.0
NA
CVE-2012-2057
Cross-site request forgery (CSRF) vulnerability in the Ubercart Bulk Stock Updater module for Drupal allows remote malicious users to hijack the authentication of unspecified victims via unknown vectors related to formAPI.
Miura Ubercart Bulk Stock Updater -
NA
CVE-2013-0321
Cross-site scripting (XSS) vulnerability in Views in the Ubercart Views (uc_views) module 6.x prior to 6.x-3.3 for Drupal allows remote malicious users to inject arbitrary web script or HTML via the full name field.
Ubercart Views Project Uc Views 6.x-3.2
Ubercart Views Project Uc Views 6.x-3.0
Ubercart Views Project Uc Views 6.x-1.x
Ubercart Views Project Uc Views 6.x-3.x
Ubercart Views Project Uc Views 6.x-2.0
Ubercart Views Project Uc Views 6.x-1.1
Ubercart Views Project Uc Views 6.x-1.0
Ubercart Views Project Uc Views 6.x-3.1
NA
CVE-2012-2702
The Ubercart Product Keys module 6.x-1.x prior to 6.x-1.1 for Drupal does not properly check access for product keys, which allows remote malicious users to read all unassigned product keys via certain conditions related to the uid.
Tony Freixas Ubercart Product Keys 6.x-1.0
NA
CVE-2008-1978
Cross-site scripting (XSS) vulnerability in the Ubercart 5.x prior to 5.x-1.0 rc3 module for Drupal allows remote authenticated users to inject arbitrary web script or HTML via node titles related to unspecified product features, a different vector than CVE-2008-1428.
Drupal Ubercart Module
NA
CVE-2012-2731
The Ubercart AJAX Cart 6.x-2.x prior to 6.x-2.1 for Drupal stores the PHP session id in the JavaScript settings array in page loads, which might allow remote malicious users to obtain sensitive information by sniffing or reading the cache of the HTML of a webpage.
Richardo Ante Ubercart Ajax Cart 6.x-2.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-4463
CVE-2024-29895
inject
CVE-2023-52689
CVE-2024-5049
CVE-2024-5051
privilege escalation
physical
CVE-2023-52676
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3