PT-2025-47617

Name of the Vulnerable Software and Affected Versions Revive Adserver versions 5.5.2 and earlier Revive Adserver version 6.0.1 Description A missing JSON Content-Type header in a script within the software can lead to a stored cross-site scripting XSS attack. This attack is possible for users wit...

EC-CUBE vulnerable to directory traversal

Overview EC-CUBE provided by EC-CUBE CO.,LTD. contains a directory traversal vulnerability CWE-22. EC-CUBE CO.,LTD. reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and EC-CUBE CO.,LTD. coordinated under the Information Security Early Warning...