CVE-2012-2299

The Ubercart module for Drupal (versions 6.x-2.x prior to 6.x-2.8 and 7.x-3.x prior to 7.x-3.1) stores passwords for new customers in plaintext during checkout, enabling local users to read sensitive information from the database. Affected products: Ubercart on Drupal 6.x and 7.x. Root cause: lac...