Lucene search
HistoryMay 13, 2011 - 5:05 p.m.
CVE-2011-1325
5.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:P/A:P
7.1 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
52.8%
Cross-site request forgery (CSRF) vulnerability in EC-CUBE before 2.11.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
Affected configurations
Node
lockonec-cubeRange≤2.11.0beta2
ORlockonec-cubeMatch1.1.0beta
ORlockonec-cubeMatch1.1.1
ORlockonec-cubeMatch1.2.0beta
ORlockonec-cubeMatch1.3.0
ORlockonec-cubeMatch1.3.0beta
ORlockonec-cubeMatch1.3.1
ORlockonec-cubeMatch1.3.1a
ORlockonec-cubeMatch1.3.2
ORlockonec-cubeMatch1.3.3
ORlockonec-cubeMatch1.3.4
ORlockonec-cubeMatch1.3.4community
ORlockonec-cubeMatch1.4.0a-beta
ORlockonec-cubeMatch1.4.0beta
ORlockonec-cubeMatch1.4.1beta
ORlockonec-cubeMatch1.4.2beta
ORlockonec-cubeMatch1.4.3a-beta
ORlockonec-cubeMatch1.4.3b-beta
ORlockonec-cubeMatch1.4.3beta
ORlockonec-cubeMatch1.4.4beta
ORlockonec-cubeMatch1.4.5
ORlockonec-cubeMatch1.4.6
ORlockonec-cubeMatch1.4.7
ORlockonec-cubeMatch1.5.0beta
ORlockonec-cubeMatch2.0.0beta
ORlockonec-cubeMatch2.0.1
ORlockonec-cubeMatch2.0.1a
ORlockonec-cubeMatch2.1.0beta
ORlockonec-cubeMatch2.1.2
ORlockonec-cubeMatch2.1.2a
ORlockonec-cubeMatch2.2.0beta
ORlockonec-cubeMatch2.2.1one
ORlockonec-cubeMatch2.3.0
ORlockonec-cubeMatch2.3.0rc1
ORlockonec-cubeMatch2.3.1
ORlockonec-cubeMatch2.3.3
ORlockonec-cubeMatch2.3.4
ORlockonec-cubeMatch2.4.0
ORlockonec-cubeMatch2.4.0rc1
ORlockonec-cubeMatch2.4.1
ORlockonec-cubeMatch2.4.2
ORlockonec-cubeMatch2.4.3
ORlockonec-cubeMatch2.4.4
ORlockonec-cubeMatch2.5.0alpha
ORlockonec-cubeMatch2.5.0alpha2
ORlockonec-cubeMatch2.11.0
ORlockonec-cubeMatch2.11.0beta
Related
prion
prion
Cross site request forgery (csrf)
2011-05-13 17:05:00
cvelist
cvelist
CVE-2011-1325
2022-10-03 16:15:10
cve
cve
CVE-2011-1325
2022-10-03 16:15:10
jvn
jvn
JVN#37878530: EC-CUBE vulnerable to cross-site request forgery
2011-05-10 00:00:00
5.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:P/A:P
7.1 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
52.8%
Related for NVD:CVE-2011-1325