PT-2014-2244

Name of the Vulnerable Software and Affected Versions Ubercart module versions 6.x-2.x before 6.x-2.8 Description The issue allows remote authenticated users with the "administer product classes" permission to execute arbitrary PHP code. Recommendations For Ubercart module versions 6.x-2.x before...

CVE-2012-2301: Improper Control of Generation of Code

The Ubercart module 6.x-2.x before 6.x-2.8 for Drupal allows remote authenticated users with the "administer product classes" permission to execute arbitrary PHP code via unspecified vectors...

PT-2012-3934

Name of the Vulnerable Software and Affected Versions Ubercart module versions 6.x-2.x before 6.x-2.8 Ubercart module versions 7.x-3.x before 7.x-3.1 Description The issue allows remote authenticated users with the administer product classes permission to inject arbitrary web script or HTML via...

CVE-2012-2300: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Ubercart module 6.x-2.x before 6.x-2.8 and 7.x-3.x before 7.x-3.1 for Drupal allow remote authenticated users with the administer product classes permission to inject arbitrary web script or HTML via unspecified vectors...