PT-2013-4544

Name of the Vulnerable Software and Affected Versions LOCKON EC-CUBE versions 2.11.2 through 2.12.4 Description The issue allows remote attackers to conduct unspecified PHP code-injection attacks via a crafted string, related to data/class/SC CheckError.php and data/class/SC FormParam.php...

PT-2013-4547

Name of the Vulnerable Software and Affected Versions EC-CUBE versions 2.12.0 through 2.12.4 Description A directory traversal issue allows remote attackers to read arbitrary image files. This is related to vectors involving the files data/class/SC CheckError.php and data/class/SC FormParam.php...