CVE-2013-7302 | BDVDB-2026-61290 Detail

Description#

Session fixation vulnerability in the Ubercart module 6.x-2.x before 6.x-2.13 and 7.x-3.x before 7.x-3.6 for Drupal, when the "Log in new customers after checkout" option is enabled, allows remote attackers to hijack web sessions by leveraging knowledge of the original session ID.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://drupal.org/node/2158651
https://drupal.org/node/2158567
https://drupal.org/node/2158565

Exploit#

No public exploit known

History#

Version 12014-04-29Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.