drupal.orgConfirmation
http://drupal.org/node/1922136 CVE-2013-0322
Ransomware
ubercart ubercart Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Record summary
CVE-2013-0322 has a selected CVSS score of 4.3. VulnCheck reports CVE-2013-0322 use in known ransomware campaigns.
Description
Cross-site scripting (XSS) vulnerability in Views in the Ubercart module 7.x-3.x before 7.x-3.4 for Drupal allows remote attackers to inject arbitrary web script or HTML via the full name field.
Description source: CVE List
Exploitation context
Known exploitation
- VulnCheck KEV
- Listed · Jan 26, 2022 · VulnCheck
- Reported exploitation
- Observed · VulnCheck
- Ransomware use
- Observed · VulnCheck
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
ubercartBrowse ubercart / ubercart | VulnCheck | Version data not supplied | |
References
6drupal.org
http://drupal.org/node/1922418 drupalcode.orgConfirmation
http://drupalcode.org/project/ubercart.git/commitdiff/f9d69b5 52298Third-party advisory
http://secunia.com/advisories/52298 [oss-security] 20130220 Re: CVE request for Drupal Core and contributed modulesmailing list
http://www.openwall.com/lists/oss-security/2013/02/21/5 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2013-0322