Lucene search
+L

107 matches found

NVD
NVD
•added 2012/10/31 4:55 p.m.•25 views

CVE-2012-4482

The Ubercart SecureTrading Payment Method module 6.x for Drupal does not properly verify payment notification information, which allows remote attackers to purchase an item without paying via unspecified vectors...

5CVSS6.7AI score0.01318EPSS
SaveExploits0References3
CVE
CVE
•added 2012/10/31 4:00 p.m.•55 views

CVE-2012-4482

CVE-2012-4482 affects the Ubercart SecureTrading Payment Method module 6.x for Drupal. The root cause is that payment notification information is not properly verified, enabling remote attackers to complete a purchase without payment via unspecified vectors. The connected sources (including NVD a...

5CVSS6.9AI score0.01318EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/10/31 12:00 a.m.•4 views

CVE-2012-4482: Improper Input Validation

The Ubercart SecureTrading Payment Method module 6.x for Drupal does not properly verify payment notification information, which allows remote attackers to purchase an item without paying via unspecified vectors...

5CVSS5.8AI score0.01318EPSS
SaveExploits0References2
Drupal
Drupal
•added 2012/07/11 12:00 a.m.•21 views

SA-CONTRIB-2012-112 - Ubercart SecureTrading - Failure to follow guideline/specification

The Ubercart SecureTrading Payment Method module provides an Ubercart payment method for the SecureTrading.com gateway. The module's payment method did not properly verify the validity of payment notification information. A malicious user could trick a site into thinking that an item has been pai...

6.9AI score
SaveExploits0References9
Prion
Prion
•added 2010/01/05 7:00 p.m.•19 views

Sql injection

Multiple SQL injection vulnerabilities in index.php in PhpShop 0.8.1 allow remote attackers to execute arbitrary SQL commands via the 1 moduleid parameter in an admin/functionlist action, the 2 vendorid parameter in a vendor/vendorform action, the 3 moduleid parameter in an admin/moduleform actio...

7.5CVSS8.8AI score0.0202EPSS
SaveExploits4References5Affected Software1
CVE
CVE
•added 1976/01/01 12:00 a.m.•14 views

CVE-2023-40746

This CVE ID has been rejected as unused by its CNA and does not represent an active vulnerability entry.

SaveExploits0
Cvelist
Cvelist
•added 1976/01/01 12:00 a.m.•27 views

CVE-2023-40746

...

SaveExploits0
Rows per page
Query Builder