| Package | Affected versions | Patched versions |
|---|---|---|
| ubercart product keys | = 6.x-1.0 |
The Ubercart Product Keys module 6.x-1.x before 6.x-1.1 for Drupal does not properly check access for product keys, which allows remote attackers to read all unassigned product keys via certain conditions related to the uid.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free