PT-2013-3658

Name of the Vulnerable Software and Affected Versions LOCKON EC-CUBE versions 2.11.0 through 2.12.3enP2 Description A cross-site scripting XSS issue exists in the adminAuthorization function, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL associated with the...

CVE-2013-2314: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the adminAuthorization function in data/class/helper/SCHelperSession.php in LOCKON EC-CUBE 2.11.0 through 2.12.3enP2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL associated with the management screen...