Ec-Cube Help Plugin Security Vulnerabilities - January

cve

CVE-2016-1154

SQL injection vulnerability in the Help plug-in 1.3.5 and earlier in Cuore EC-CUBE allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

9.1CVSS

9.6AI Score

0.001EPSS

2016-02-19 07:59 PM