Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Drupal Component: Ubercart Module Clear all filters
TI-2008-01901 CVE-2008-1978 · GHSA-mcg9-wmv9-gjf3

Cross-site scripting (XSS) vulnerability in the Ubercart 5.x before 5.x-1.0 rc3 module…

Priority LOW 18

Cross-site scripting (XSS) vulnerability in the Ubercart 5.x before 5.x-1.0 rc3 module for Drupal allows remote authenticated users to inject arbitrary web script or HTML via node titles related to unspecified product fe…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.00868 Published 2008-04-27 No fix listed CWE-79
TI-2008-01840 CVE-2008-1916 · GHSA-56j4-x43g-j8hc

Multiple cross-site scripting (XSS) vulnerabilities in the Ubercart 5.x before…

Priority LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in the Ubercart 5.x before 5.x-1.0-rc1 module for Drupal allow remote attackers to inject arbitrary web script or HTML via text fields intended for the (1) address and…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01022 Published 2008-04-22 No fix listed CWE-79
TI-2008-01371 CVE-2008-1428 · GHSA-78j5-67xv-wrw7

Multiple cross-site scripting (XSS) vulnerabilities in the Ubercart 5.x before…

Priority LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in the Ubercart 5.x before 5.x-1.0-beta7 module for Drupal allow remote attackers to inject arbitrary web script or HTML via a text attribute value for a product.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01022 Published 2008-03-20 No fix listed CWE-79
TI-2007-05402 CVE-2007-5621 · GHSA-7c37-p4gh-wrh2

Multiple cross-site scripting (XSS) vulnerabilities in the Token module before 4.7.x-1.5…

Priority LOW 18

Multiple cross-site scripting (XSS) vulnerabilities in the Token module before 4.7.x-1.5, and 5.x before 5.x-1.9, for Drupal; as used by the ASIN Field, e-Commerce, Fullname field for CCK, Invite, Node Relativity, Pathau…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.00842 Published 2007-10-22 No fix listed CWE-79