Ubercart Ajax Cart
Monthly
The Ubercart AJAX Cart 6.x-2.x before 6.x-2.1 for Drupal stores the PHP session id in the JavaScript settings array in page loads, which might allow remote attackers to obtain sensitive information. Rated low severity (CVSS 2.6), this vulnerability is remotely exploitable. Public exploit code available.
The Ubercart AJAX Cart 6.x-2.x before 6.x-2.1 for Drupal stores the PHP session id in the JavaScript settings array in page loads, which might allow remote attackers to obtain sensitive information. Rated low severity (CVSS 2.6), this vulnerability is remotely exploitable. Public exploit code available.