CVE-2016-1180: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Cyber-Will Social-button Premium plugin before 1.1 for EC-CUBE 2.13.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

ButtonBass EDM Cube - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application ButtonBass EDM Cube published at the 'play' market has multiple vulnerabilities...

ButtonBass House Cube - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application ButtonBass House Cube published at the 'play' market has multiple vulnerabilities...

ButtonBass Dubstep Cube - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application ButtonBass Dubstep Cube published at the 'play' market has multiple vulnerabilities...

ButtonBass EDM Cube 2 - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application ButtonBass EDM Cube 2 published at the 'play' market has multiple vulnerabilities...

Cube Jump - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Cube Jump published at the 'play' market has multiple vulnerabilities...

Cube Escape: The Mill - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Cube Escape: The Mill published at the 'play' market has multiple vulnerabilities...

Nights at Cube Pizzeria 3D – 2 - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Nights at Cube Pizzeria 3D – 2 published at the 'play' market has multiple vulnerabilities...

Radio Online - FM Cube - Corrupted files, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Radio Online - FM Cube published at the 'play' market has multiple vulnerabilities...

AppLock Theme Cube - Exported components vulnerabilities

HackApp vulnerability scanner discovered that application AppLock Theme Cube published at the 'play' market has multiple vulnerabilities...

Rubik's Cube for Android Wear - Dynamic Code Loading, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Rubik's Cube for Android Wear published at the 'play' market has multiple vulnerabilities...

Cuore EC-CUBE Help plug-in SQL Injection Vulnerability

Cuore EC-CUBE Help plug-in is a Japan Cuore company's use in EC-CUBE open source e-commerce site building platform and provide help function plug-in. A SQL injection vulnerability exists in the Cuore EC-CUBE Help plug-in, which allows remote attackers to execute arbitrary SQL commands via...

CVE-2016-1154

SQL injection vulnerability in the Help plug-in 1.3.5 and earlier in Cuore EC-CUBE allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2016-1154

SQL injection vulnerability in the Help plug-in 1.3.5 and earlier in Cuore EC-CUBE allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the Help plug-in 1.3.5 and earlier in Cuore EC-CUBE allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2016-1154

SQL injection vulnerability in the Help plug-in 1.3.5 and earlier in Cuore EC-CUBE allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2016-1154

Cuore EC-CUBE Help plug-in (version 1.3.5 and earlier) contains an SQL injection (CWE-89) vulnerability. Remote attackers can execute arbitrary SQL via unspecified vectors, potentially exposing or altering database information. The affected component is the Help plug-in for EC-CUBE created by Cuo...

EC-CUBE plugin "Help plug-in" vulnerable to SQL injection

Overview EC-CUBE plugin "Help plug-in" provided by Cuore contains an SQL injection vulnerability CWE-89. Gen Sato of TRADE WORKS Co.,Ltd. Security Dept. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact...

JVN#31524757: EC-CUBE plugin "Help plug-in" vulnerable to SQL injection

EC-CUBE plugin "Help plug-in" provided by Cuore contains an SQL injection vulnerability CWE-89. Impact Information stored in the database may be obtained or altered by a remote attacker. Solution Update the plugin Update to the latest version according to the information provided by the developer...

CVE-2016-1154: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Help plug-in 1.3.5 and earlier in Cuore EC-CUBE allows remote attackers to execute arbitrary SQL commands via unspecified vectors...