CVE-2012-2731

State: Published
Severity: Not scored
Published: Jun 27, 2012
Updated: Aug 6, 2024
Reserved: May 14, 2012

Description

The Ubercart AJAX Cart 6.x-2.x before 6.x-2.1 for Drupal stores the PHP session id in the JavaScript settings array in page loads, which might allow remote attackers to obtain sensitive information by sniffing or reading the cache of the HTML of a webpage.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

http://drupalcode.org/project/uc_ajax_cart.git/commitdiff/b59cdd5
uberart-ajax-info-disc(76332)vdb-entry
53999vdb-entry
http://drupal.org/node/1633048
[oss-security] 20120613 Re: CVE Request for Drupal contributed modulesmailing-list
http://drupal.org/node/1619586

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.