EUVD-2009-4735

Malware in sbrugna...

CVE-2009-4772

Unspecified vulnerability in the PayPal Website Payments Standard functionality in the Ubercart module 5.x before 5.x-1.9 and 6.x before 6.x-2.1 for Drupal, when a custom checkout completion message is enabled, allows attackers to obtain sensitive information via unknown vectors...

Code injection

The PayPal Website Payments Standard functionality in the Ubercart module 5.x before 5.x-1.9 and 6.x before 6.x-2.1 for Drupal does not properly validate orders, which allows remote attackers to trigger unspecified "duplicate actions" via unknown vectors...

CVE-2009-4772

The CVE-2009-4772 entry concerns a vulnerability in Drupal’s Ubercart PayPal Website Payments Standard integration. Affected are Ubercart 5.x (before 5.x-1.9) and 6.x (before 6.x-2.1) when a custom checkout completion message is enabled. The flaw is described as an unspecified vulnerability that ...

CVE-2009-4771

The CVE-2009-4771 issue affects the Drupal Ubercart PayPal Website Payments Standard integration. Specifically, Ubercart 5.x prior to 5.x-1.9 and 6.x prior to 6.x-2.1 do not properly validate orders, which can allow remote attackers to trigger unspecified “duplicate actions” via unknown vectors. ...

CVE-2009-4772: Undefined Security Weakness

Unspecified vulnerability in the PayPal Website Payments Standard functionality in the Ubercart module 5.x before 5.x-1.9 and 6.x before 6.x-2.1 for Drupal, when a custom checkout completion message is enabled, allows attackers to obtain sensitive information via unknown vectors...

CVE-2009-4771: Improper Input Validation

The PayPal Website Payments Standard functionality in the Ubercart module 5.x before 5.x-1.9 and 6.x before 6.x-2.1 for Drupal does not properly validate orders, which allows remote attackers to trigger unspecified "duplicate actions" via unknown vectors...