CVE:CVE-2012-2731
CNNVD:CNNVD-201206-296
Drupal是Drupal社区所维护的一套用PHP语言开发的免费、开源的内容管理系统。
Drupal中的Ubercart AJAX Cart模块中存在信息泄露漏洞。攻击者可利用该漏洞获取有助于进一步攻击的敏感信息。Ubercart AJAX Cart 6.x-2.1之前版本到6.x-2.x版本中存在漏洞。
solution:Upgrade richardo_ante ubercart_ajax_cart to a higher version than 6.x-2.0,6.x-2.0:alpha6,6.x-2.0:alpha7,6.x-2.0:alpha8,6.x-2.0:beta1,6.x-2.0:beta10,6.x-2.0:beta11,6.x-2.0:beta2,6.x-2.0:beta3,6.x-2.0:beta4,6.x-2.0:beta5,6.x-2.0:beta6,6.x-2.0:beta7,6.x-2.0:beta8,6.x-2.0:beta9,6.x-2.0:rc1,6.x-2.0:rc2,6.x-2.0:rc3,6.x-2.0:rc4,and avoid the version 6.x-2.0,6.x-2.0:alpha6,6.x-2.0:alpha7,6.x-2.0:alpha8,6.x-2.0:beta1,6.x-2.0:beta10,6.x-2.0:beta11,6.x-2.0:beta2,6.x-2.0:beta3,6.x-2.0:beta4,6.x-2.0:beta5,6.x-2.0:beta6,6.x-2.0:beta7,6.x-2.0:beta8,6.x-2.0:beta9,6.x-2.0:rc1,6.x-2.0:rc2,6.x-2.0:rc3,6.x-2.0:rc4