Lucene search
HistoryApr 20, 2010 - 2:30 p.m.
CVE-2009-4772
cve-2009-4772
paypal
website payments standard
ubercart
drupal
vulnerability
information security
nvd
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
6.2 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
65.8%
Unspecified vulnerability in the PayPal Website Payments Standard functionality in the Ubercart module 5.x before 5.x-1.9 and 6.x before 6.x-2.1 for Drupal, when a custom checkout completion message is enabled, allows attackers to obtain sensitive information via unknown vectors.
Affected configurations
Node
ubercartubercartMatch5.x-1.0
ORubercartubercartMatch5.x-1.0alpha1
ORubercartubercartMatch5.x-1.0alpha2
ORubercartubercartMatch5.x-1.0alpha3
ORubercartubercartMatch5.x-1.0alpha4
ORubercartubercartMatch5.x-1.0alpha5
ORubercartubercartMatch5.x-1.0alpha6
ORubercartubercartMatch5.x-1.0alpha6b
ORubercartubercartMatch5.x-1.0alpha6c
ORubercartubercartMatch5.x-1.0alpha7
ORubercartubercartMatch5.x-1.0alpha7b
ORubercartubercartMatch5.x-1.0alpha7c
ORubercartubercartMatch5.x-1.0alpha7d
ORubercartubercartMatch5.x-1.0alpha7e
ORubercartubercartMatch5.x-1.0alpha8
ORubercartubercartMatch5.x-1.0beta1
ORubercartubercartMatch5.x-1.0beta2
ORubercartubercartMatch5.x-1.0beta3
ORubercartubercartMatch5.x-1.0beta4
ORubercartubercartMatch5.x-1.0beta5
ORubercartubercartMatch5.x-1.0beta6
ORubercartubercartMatch5.x-1.0beta7
ORubercartubercartMatch5.x-1.0rc1
ORubercartubercartMatch5.x-1.0rc2
ORubercartubercartMatch5.x-1.0rc3
ORubercartubercartMatch5.x-1.0rc4
ORubercartubercartMatch5.x-1.0rc5
ORubercartubercartMatch5.x-1.1
ORubercartubercartMatch5.x-1.2
ORubercartubercartMatch5.x-1.3
ORubercartubercartMatch5.x-1.3rc1
ORubercartubercartMatch5.x-1.4
ORubercartubercartMatch5.x-1.5
ORubercartubercartMatch5.x-1.6
ORubercartubercartMatch5.x-1.7
ORubercartubercartMatch5.x-1.8
ORubercartubercartMatch6.x-2.0
ORubercartubercartMatch6.x-2.0beta1
ORubercartubercartMatch6.x-2.0beta2
ORubercartubercartMatch6.x-2.0beta3
ORubercartubercartMatch6.x-2.0beta4
ORubercartubercartMatch6.x-2.0beta5
ORubercartubercartMatch6.x-2.0beta6
ORubercartubercartMatch6.x-2.0dev
ORubercartubercartMatch6.x-2.0rc1
ORubercartubercartMatch6.x-2.0rc2
ORubercartubercartMatch6.x-2.0rc3
ORubercartubercartMatch6.x-2.0rc4
ORubercartubercartMatch6.x-2.0rc5
ORubercartubercartMatch6.x-2.0rc6
ORubercartubercartMatch6.x-2.0rc7
drupaldrupal
Related
prion
prion
Code injection
2010-04-20 14:30:00
nvd
nvd
CVE-2009-4772
2010-04-20 14:30:01
cvelist
cvelist
CVE-2009-4772
2010-04-20 14:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
6.2 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
65.8%
Related for CVE-2009-4772