Lucene search
HistoryAug 30, 2013 - 9:55 p.m.
CVE-2013-4702
cve-2013-4702
data class api
directory traversal
vulnerability
remote attackers
arbitrary files
nvd
7 High
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.012 Low
EPSS
Percentile
84.9%
Multiple directory traversal vulnerabilities in the doApiAction function in data/class/api/SC_Api_Operation.php in LOCKON EC-CUBE 2.12.0 through 2.12.5 on Windows allow remote attackers to read arbitrary files via vectors involving a (1) Operation, (2) Service, (3) Style, (4) Validate, or (5) Version value.
Affected configurations
Node
lockonec-cubeMatch2.12.0
ORlockonec-cubeMatch2.12.1
ORlockonec-cubeMatch2.12.2
ORlockonec-cubeMatch2.12.3
ORlockonec-cubeMatch2.12.3en
ORlockonec-cubeMatch2.12.3enp1
ORlockonec-cubeMatch2.12.3enp2
ORlockonec-cubeMatch2.12.4
ORlockonec-cubeMatch2.12.4en
ORlockonec-cubeMatch2.12.5
ORlockonec-cubeMatch2.12.5en
Related
cvelist
cvelist
CVE-2013-4702
2013-08-30 21:00:00
prion
prion
Directory traversal
2013-08-30 21:55:00
jvn
jvn
JVN#15973066: EC-CUBE vulnerable to directory traversal when used in Windows
2013-08-30 00:00:00
nvd
nvd
CVE-2013-4702
2013-08-30 21:55:09
7 High
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.012 Low
EPSS
Percentile
84.9%
Related for CVE-2013-4702