CVE-2013-3654

2013-06-2919:00:00

jpcert

www.cve.org

directory traversal

lockon ec-cube

remote attackers

arbitrary image files

AI Score

6.5

Confidence

Low

EPSS

0.005

Percentile

75.8%

JSON

Directory traversal vulnerability in LOCKON EC-CUBE 2.12.0 through 2.12.4 allows remote attackers to read arbitrary image files via vectors related to data/class/SC_CheckError.php and data/class/SC_FormParam.php, a different vulnerability than CVE-2013-3650.