GCVE - cpe:2.3:a:ubercart:ubercart:5.x-1.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ubercart:ubercart:5.x-1.0:*:*:*:*:*:*:*

part: a version: 5.x-1.0 update: *

Vendor	Ubercart (`1147b701-3de8-5393-a772-88f98e38f0ff`)
Product	Ubercart (`eed921dc-bd95-57f2-837c-bf645af54ded`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2009-4773`	vulnerable	2026-06-08 04:51:49.539852	Details available Cross-site request forgery (CSRF) vulnerability in the order-management functionality in the Ubercart module 5.x before 5.x-1.9 and 6.x before 6.x-2.1 for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Published: 2010-04-20T14:00:00.000Z Updated: 2024-08-07T07:17:25.657Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/37058 http://drupal.org/node/636576 https://exchange.xforce.ibmcloud.com/vulnerabilities/54344 http://osvdb.org/60292 http://secunia.com/advisories/37440	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-4772`	vulnerable	2026-06-08 04:51:49.538073	Details available Unspecified vulnerability in the PayPal Website Payments Standard functionality in the Ubercart module 5.x before 5.x-1.9 and 6.x before 6.x-2.1 for Drupal, when a custom checkout completion message is enabled, allows attackers to obtain sensitive information via unknown vectors. Published: 2010-04-20T14:00:00.000Z Updated: 2024-08-07T07:17:25.411Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/37058 http://drupal.org/node/636576 http://osvdb.org/60291 http://secunia.com/advisories/37440 https://exchange.xforce.ibmcloud.com/vulnerabilities/54345	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-4771`	vulnerable	2026-06-08 04:51:49.510161	Details available The PayPal Website Payments Standard functionality in the Ubercart module 5.x before 5.x-1.9 and 6.x before 6.x-2.1 for Drupal does not properly validate orders, which allows remote attackers to trigger unspecified "duplicate actions" via unknown vectors. Published: 2010-04-20T14:00:00.000Z Updated: 2024-08-07T07:17:25.354Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/54346 http://www.securityfocus.com/bid/37058 http://drupal.org/node/636576 http://secunia.com/advisories/37440 http://osvdb.org/60290	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Ubercart

Notes

PURL mappings

Vulnerability references

Contribute