Skip to content
Noroxi

ubercart records

12 published records for vendor ubercart.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    12 records
    • CVE-2013-7302
      27Monitor

      Session fixation vulnerability in the Ubercart module 6.x-2.x before 6.x-2.13 and 7.x-3.x before 7.x-3.6 for Drupal, when the "Log in new cu

      MediumCVSS 6.8No exploitEPSS 1%

      ubercart · ubercartApr 29, 2014

    • CVE-2009-4773
      27Monitor

      Cross-site request forgery (CSRF) vulnerability in the order-management functionality in the Ubercart module 5.x before 5.x-1.9 and 6.x befo

      MediumCVSS 6.8No exploitEPSS 0%

      ubercart · ubercartApr 20, 2010

    • CVE-2012-2301
      24Monitor

      The Ubercart module 6.x-2.x before 6.x-2.8 for Drupal allows remote authenticated users with the "administer product classes" permission to

      MediumCVSS 6.0No exploitEPSS 1%

      ubercart · ubercartNov 15, 2014

    • CVE-2012-5802
      23Monitor

      The PayPal module in Ubercart does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAlt

      MediumCVSS 5.8No exploitEPSS 0%

      paypal · paypalNov 4, 2012

    • CVE-2012-5804
      23Monitor

      The CyberSource module in Ubercart does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subje

      MediumCVSS 5.8No exploitEPSS 0%

      ubercart · ubercartNov 4, 2012

    • CVE-2012-5803
      23Monitor

      The Authorize.Net module in Ubercart does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or sub

      MediumCVSS 5.8No exploitEPSS 0%

      ubercart · ubercartNov 4, 2012

    • CVE-2009-4771
      20Monitor

      The PayPal Website Payments Standard functionality in the Ubercart module 5.x before 5.x-1.9 and 6.x before 6.x-2.1 for Drupal does not prop

      MediumCVSS 5.0No exploitEPSS 1%

      ubercart · ubercartApr 20, 2010

    • CVE-2013-0322
      17Monitor

      Cross-site scripting (XSS) vulnerability in Views in the Ubercart module 7.x-3.x before 7.x-3.4 for Drupal allows remote attackers to inject

      MediumCVSS 4.3No exploitEPSS 1%

      ubercart · ubercartMar 27, 2013

    • CVE-2009-4772
      17Monitor

      Unspecified vulnerability in the PayPal Website Payments Standard functionality in the Ubercart module 5.x before 5.x-1.9 and 6.x before 6.x

      MediumCVSS 4.3No exploitEPSS 0%

      ubercart · ubercartApr 20, 2010

    • CVE-2014-9026
      16Monitor

      The Ubercart module 7.x-3.x before 7.x-3.7 for Drupal does not properly protect the per-user order history view, which allows remote authent

      MediumCVSS 4.0No exploitEPSS 0%

      ubercart · ubercartNov 20, 2014

    • CVE-2012-2300
      8Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in the Ubercart module 6.x-2.x before 6.x-2.8 and 7.x-3.x before 7.x-3.1 for Drupal allo

      LowCVSS 2.1No exploitEPSS 1%

      ubercart · ubercartAug 14, 2012

    • CVE-2012-2299
      8Monitor

      The Ubercart module 6.x-2.x before 6.x-2.8 and 7.x-3.x before 7.x-3.1 for Drupal stores passwords for new customers in plaintext during chec

      LowCVSS 2.1No exploitEPSS 0%

      ubercart · ubercartAug 14, 2012