Skip to main content

Ubercart Ajax Cart

1 CVEs product

Monthly

CVE-2012-2731 LOW POC PATCH Monitor

The Ubercart AJAX Cart 6.x-2.x before 6.x-2.1 for Drupal stores the PHP session id in the JavaScript settings array in page loads, which might allow remote attackers to obtain sensitive information. Rated low severity (CVSS 2.6), this vulnerability is remotely exploitable. Public exploit code available.

PHP Information Disclosure Ubercart Ajax Cart
NVD
CVSS 2.0
2.6
EPSS
0.6%
EPSS 1% CVSS 2.6
LOW POC PATCH Monitor

The Ubercart AJAX Cart 6.x-2.x before 6.x-2.1 for Drupal stores the PHP session id in the JavaScript settings array in page loads, which might allow remote attackers to obtain sensitive information. Rated low severity (CVSS 2.6), this vulnerability is remotely exploitable. Public exploit code available.

PHP Information Disclosure Ubercart Ajax Cart
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy