Lucene search
HistoryNov 16, 2014 - 2:59 a.m.
CVE-2012-2301
ubercart
drupal
remote code execution
cve-2012-2301
security vulnerability
7.5 High
AI Score
Confidence
Low
6 Medium
CVSS2
Access Vector
Access Complexity
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
0.006 Low
EPSS
Percentile
78.5%
The Ubercart module 6.x-2.x before 6.x-2.8 for Drupal allows remote authenticated users with the “administer product classes” permission to execute arbitrary PHP code via unspecified vectors.
Affected configurations
Node
ubercartubercartMatch6.x-2.0drupal
ORubercartubercartMatch6.x-2.1drupal
ORubercartubercartMatch6.x-2.2drupal
ORubercartubercartMatch6.x-2.3drupal
ORubercartubercartMatch6.x-2.4drupal
ORubercartubercartMatch6.x-2.6drupal
ORubercartubercartMatch6.x-2.7drupal
Related
prion
prion
Code injection
2014-11-16 02:59:00
nvd
nvd
CVE-2012-2301
2014-11-16 02:59:00
cvelist
cvelist
CVE-2012-2301
2014-11-16 02:00:00
drupal
drupal
SA-CONTRIB-2012-064 - Ubercart - Multiple vulnerabilities
2012-04-25 00:00:00
7.5 High
AI Score
Confidence
Low
6 Medium
CVSS2
Access Vector
Access Complexity
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
0.006 Low
EPSS
Percentile
78.5%
Related for CVE-2012-2301