Ec-cube Security Vulnerabilities and Issues — Ec-cube CVE List

Lucene search

LockonEc-cube

2 matches found

CVE•added 2013/06/30 7:28 p.m.•33 views

CVE-2013-3651

LOCKON EC-CUBE 2.11.2 through 2.12.4 allows remote attackers to conduct unspecified PHP code-injection attacks via a crafted string, related to data/class/SC_CheckError.php and data/class/SC_FormParam.php.

7.5CVSS6.9AI score0.10093EPSS

CVE•added 2011/10/21 6:55 p.m.•29 views

CVE-2011-3988

SQL injection vulnerability in data/class/SC_Query.php in EC-CUBE 2.11.0 through 2.11.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

7.5CVSS8.6AI score0.01208EPSS