CVE-2022-21179

Cross-site request forgery CSRF vulnerability in EC-CUBE plugin 'Mail Magazine Management Plugin' ver4.0.0 to 4.1.1 for EC-CUBE 4 series and ver1.0.0 to 1.0.4 for EC-CUBE 3 series allows a remote unauthenticated attacker to hijack the authentication of an administrator via a specially crafted pag...

CVE-2022-21179

Cross-site request forgery CSRF vulnerability in EC-CUBE plugin 'Mail Magazine Management Plugin' ver4.0.0 to 4.1.1 for EC-CUBE 4 series and ver1.0.0 to 1.0.4 for EC-CUBE 3 series allows a remote unauthenticated attacker to hijack the authentication of an administrator via a specially crafted pag...

PT-2022-14906

Name of the Vulnerable Software and Affected Versions EC-CUBE plugin 'Mail Magazine Management Plugin' versions 4.0.0 through 4.1.1 for EC-CUBE 4 series EC-CUBE plugin 'Mail Magazine Management Plugin' versions 1.0.0 through 1.0.4 for EC-CUBE 3 series Description A cross-site request forgery CSRF...