CVE-2015-7784

CVE-2015-7784 affects EC-CUBE via the BbAdminViewsControl213 plugin (versions before 1.1) and BbAdminViewsControl plugin (versions before 2.1). The vulnerability is an SQL injection (CWE-89) that allows a logged-in, remote, authenticated attacker to execute arbitrary SQL commands via unspecified ...