8 matches found
CVE-2013-5991
The displaySystemError function in html/handleerror.php in LOCKON EC-CUBE 2.11.0 through 2.11.5 allows remote attackers to obtain sensitive information by leveraging incorrect handling of error-log output...
CVE-2013-5991
The displaySystemError function in html/handleerror.php in LOCKON EC-CUBE 2.11.0 through 2.11.5 allows remote attackers to obtain sensitive information by leveraging incorrect handling of error-log output...
CVE-2013-5992
Cross-site scripting XSS vulnerability in the displaySystemError function in html/handleerror.php in LOCKON EC-CUBE 2.11.0 through 2.11.5 allows remote attackers to inject arbitrary web script or HTML by leveraging incorrect handling of error-message output...
CVE-2013-5991
The displaySystemError function in html/handleerror.php in LOCKON EC-CUBE 2.11.0 through 2.11.5 allows remote attackers to obtain sensitive information by leveraging incorrect handling of error-log output...
PT-2013-5902
Name of the Vulnerable Software and Affected Versions LOCKON EC-CUBE versions 2.11.0 through 2.11.5 Description The issue concerns the displaySystemError function in html/handle error.php, which incorrectly handles error-log output. This allows remote attackers to obtain sensitive information...
CVE-2013-5991: Exposure of Sensitive Information to an Unauthorized Actor
The displaySystemError function in html/handleerror.php in LOCKON EC-CUBE 2.11.0 through 2.11.5 allows remote attackers to obtain sensitive information by leveraging incorrect handling of error-log output...
CVE-2013-5992: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the displaySystemError function in html/handleerror.php in LOCKON EC-CUBE 2.11.0 through 2.11.5 allows remote attackers to inject arbitrary web script or HTML by leveraging incorrect handling of error-message output...
PT-2013-5903
Name of the Vulnerable Software and Affected Versions LOCKON EC-CUBE versions 2.11.0 through 2.11.5 Description A cross-site scripting issue exists due to incorrect handling of error-message output in the displaySystemError function. This allows remote attackers to inject arbitrary web script or...