3 matches found
CVE-2011-1325
Cross-site request forgery CSRF vulnerability in EC-CUBE before 2.11.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
5.8CVSS7.1AI score0.0061EPSS
SaveExploits0References5
CVE-2011-1325
EC-CUBE (vulnerability in EC-CUBE before 2.11.0) is affected by a cross-site request forgery (CSRF) that can hijack a logged-in user’s session via unknown vectors. The root cause is a CSRF flaw in handling authenticated requests. Impact is unauthorized actions in authenticated sessions. Remediati...
5.8CVSS7.3AI score0.0061EPSS
SaveExploits0References5Affected Software1
20