The Ubercart SecureTrading Payment Method module 6.x for Drupal does not properly verify payment notification information, which allows remote attackers to purchase an item without paying via unspecified vectors.
Product
longwaveconsulting ubercart securetrading payment method module vulnerabilities
1 published CVE affecting longwaveconsulting ubercart securetrading payment method module, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 1
- Critical
- 0
- High
- 0
- Medium
- 1
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Latest longwaveconsulting ubercart securetrading payment method module CVEs
Newest publication first
-
MediumCVSS 5.0 EPSS 1.3%
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.