7.x.3.3

DATE	CVE	VULNERABILITY TITLE	RISK
2014-11-20	CVE-2014-9026	Permissions, Privileges, and Access Controls vulnerability in Ubercart The Ubercart module 7.x-3.x before 7.x-3.7 for Drupal does not properly protect the per-user order history view, which allows remote authenticated users with the "view own orders" permission to obtain sensitive information via unspecified vectors. network low complexity ubercart CWE-264	4.0
2014-04-29	CVE-2013-7302	Improper Authentication vulnerability in Ubercart Session fixation vulnerability in the Ubercart module 6.x-2.x before 6.x-2.13 and 7.x-3.x before 7.x-3.6 for Drupal, when the "Log in new customers after checkout" option is enabled, allows remote attackers to hijack web sessions by leveraging knowledge of the original session ID. network ubercart drupal CWE-287	6.8
2013-03-27	CVE-2013-0322	Cross-Site Scripting vulnerability in Ubercart Cross-site scripting (XSS) vulnerability in Views in the Ubercart module 7.x-3.x before 7.x-3.4 for Drupal allows remote attackers to inject arbitrary web script or HTML via the full name field. network ubercart drupal CWE-79	4.3