PT-2013-5146

Name of the Vulnerable Software and Affected Versions LOCKON EC-CUBE versions 2.12.0 through 2.12.5 Description The issue concerns multiple directory traversal vulnerabilities in the doApiAction function. These vulnerabilities allow remote attackers to read arbitrary files by manipulating certain...

CVE-2013-4702: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in the doApiAction function in data/class/api/SCApiOperation.php in LOCKON EC-CUBE 2.12.0 through 2.12.5 on Windows allow remote attackers to read arbitrary files via vectors involving a 1 Operation, 2 Service, 3 Style, 4 Validate, or 5 Version value...