CVE-2015-5504: Novalnet Payment Module Ubercart-

High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days.

SQL injection vulnerability in the Novalnet Payment Module Ubercart module for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Affected products

• Novalnet Novalnet Payment Module Ubercart-: any version

Published 2015-08-18. Last modified 2026-06-17.