Ec-cube Security Vulnerabilities and Issues — Ec-cube CVE List

Lucene search

LockonEc-cube

3 matches found

CVE•added 2013/11/21 4:40 a.m.•87 views

CVE-2013-5993

Cross-site request forgery (CSRF) vulnerability in LOCKON EC-CUBE 2.11.0 through 2.13.0 allows remote attackers to hijack the authentication of arbitrary users via unspecified vectors related to refusals.

6.8CVSS7.3AI score0.00182EPSS

CVE•added 2014/01/22 9:55 p.m.•35 views

CVE-2014-0807

data/class/pages/shopping/LC_Page_Shopping_Deliv.php in LOCKON EC-CUBE 2.4.4 and earlier, and 2.11.0 through 2.12.2, allows remote attackers to modify data via unspecified vectors.

6.4CVSS6.8AI score0.00527EPSS

CVE•added 2016/04/30 10:59 a.m.•33 views

CVE-2016-1200

The management screen in LOCKON EC-CUBE 3.0.7 through 3.0.9 allows remote authenticated users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2016-1199.

6.5CVSS5.2AI score0.0024EPSS