PT-2024-29636

Name of the Vulnerable Software and Affected Versions EC-CUBE versions 4 series Description A vulnerability exists where the software accepts extraneous untrusted data alongside trusted data. If exploited, an attacker with administrative privileges may be able to install arbitrary PHP packages...

CVE-2024-41924: Acceptance of Extraneous Untrusted Data With Trusted Data

Acceptance of extraneous untrusted data with trusted data vulnerability exists in EC-CUBE 4 series. If this vulnerability is exploited, an attacker who obtained the administrative privilege may install an arbitrary PHP package. If the obsolete versions of PHP packages are installed, the product m...