Lucene search

[email protected]CVE-2013-3652

HistoryOct 03, 2022 - 4:14 p.m.

CVE-2013-3652

2022-10-0316:14:46

CWE-79

[email protected]

web.nvd.nist.gov

cve

2013

3652

cross-site scripting

xss

lockon ec-cube

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.3%

JSON

Cross-site scripting (XSS) vulnerability in data/class/pages/products/LC_Page_Products_List.php in LOCKON EC-CUBE 2.11.0 through 2.12.4 allows remote attackers to inject arbitrary web script or HTML via vectors involving the classcategory_id2 field, a different vulnerability than CVE-2013-3653.

Affected configurations

NVD

Node

lockonec-cubeMatch2.11.0

lockonec-cubeMatch2.11.1

lockonec-cubeMatch2.11.2

lockonec-cubeMatch2.11.3

lockonec-cubeMatch2.11.4

lockonec-cubeMatch2.11.5

lockonec-cubeMatch2.12.0

lockonec-cubeMatch2.12.1

lockonec-cubeMatch2.12.2

lockonec-cubeMatch2.12.3

lockonec-cubeMatch2.12.4

CPENameOperatorVersion
lockon:ec-cubelockon ec-cubeeq2.11.0
lockon:ec-cubelockon ec-cubeeq2.11.1
lockon:ec-cubelockon ec-cubeeq2.11.2
lockon:ec-cubelockon ec-cubeeq2.11.3
lockon:ec-cubelockon ec-cubeeq2.11.4
lockon:ec-cubelockon ec-cubeeq2.11.5
lockon:ec-cubelockon ec-cubeeq2.12.0
lockon:ec-cubelockon ec-cubeeq2.12.1
lockon:ec-cubelockon ec-cubeeq2.12.2
lockon:ec-cubelockon ec-cubeeq2.12.3

CPE	Name	Operator	Version
lockon:ec-cube	lockon ec-cube	eq	2.11.0
lockon:ec-cube	lockon ec-cube	eq	2.11.1
lockon:ec-cube	lockon ec-cube	eq	2.11.2
lockon:ec-cube	lockon ec-cube	eq	2.11.3
lockon:ec-cube	lockon ec-cube	eq	2.11.4
lockon:ec-cube	lockon ec-cube	eq	2.11.5
lockon:ec-cube	lockon ec-cube	eq	2.12.0
lockon:ec-cube	lockon ec-cube	eq	2.12.1
lockon:ec-cube	lockon ec-cube	eq	2.12.2
lockon:ec-cube	lockon ec-cube	eq	2.12.3

Rows per page:

1-10 of 111

References

jvn.jp/en/jp/JVN07192063/index.html

jvndb.jvn.jp/jvndb/JVNDB-2013-000063

svn.ec-cube.net/open_trac/changeset/22862

www.ec-cube.net/info/weakness/20130626/index.php

www.ec-cube.net/info/weakness/weakness.php?id=47

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.3%

JSON

Related for CVE-2013-3652

nvd2 prion2 cvelist2 cve1 jvn2