Authentication flaw

2014-01-2221:55:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.2%

JSON

data/class/pages/shopping/LC_Page_Shopping_Deliv.php in LOCKON EC-CUBE 2.4.4 and earlier, and 2.11.0 through 2.12.2, allows remote attackers to modify data via unspecified vectors.

CPENameOperatorVersion
ec-cubeeq2.4.0
ec-cubeeq2.4.3
ec-cubeeq2.4.0 rc1
ec-cubeeq2.4.2
ec-cubele2.4.4
ec-cubeeq2.4.1
ec-cubeeq2.11.2
ec-cubeeq2.11.0
ec-cubeeq2.11.0 beta
ec-cubeeq2.11.0 beta2

Name	Operator	Version
ec-cube	eq	2.4.0
ec-cube	eq	2.4.3
ec-cube	eq	2.4.0 rc1
ec-cube	eq	2.4.2
ec-cube	le	2.4.4
ec-cube	eq	2.4.1
ec-cube	eq	2.11.2
ec-cube	eq	2.11.0
ec-cube	eq	2.11.0 beta
ec-cube	eq	2.11.0 beta2