Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

lockon ec-cube 2.12.5 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2013-5995
data/class/helper/SC_Helper_Address.php in the front-features implementation in LOCKON EC-CUBE 2.12.3 up to and including 2.13.0 allows remote authenticated users to obtain sensitive information via unspecified vectors related to addresses.
Lockon Ec-cube 2.12.5Lockon Ec-cube 2.12.4enLockon Ec-cube 2.12.3enp2Lockon Ec-cube 2.12.3enp1Lockon Ec-cube 2.12.6Lockon Ec-cube 2.13.0Lockon Ec-cube 2.12.3Lockon Ec-cube 2.12.6enLockon Ec-cube 2.12.5enLockon Ec-cube 2.12.3en
NA
CVE-2013-4702
Multiple directory traversal vulnerabilities in the doApiAction function in data/class/api/SC_Api_Operation.php in LOCKON EC-CUBE 2.12.0 up to and including 2.12.5 on Windows allow remote malicious users to read arbitrary files via vectors involving a (1) Operation, (2) Service, ...
Lockon Ec-cube 2.12.2Lockon Ec-cube 2.12.3Lockon Ec-cube 2.12.5Lockon Ec-cube 2.12.5enLockon Ec-cube 2.12.4Lockon Ec-cube 2.12.0Lockon Ec-cube 2.12.1Lockon Ec-cube 2.12.4enLockon Ec-cube 2.12.3enLockon Ec-cube 2.12.3enp1Lockon Ec-cube 2.12.3enp2
NA
CVE-2015-5665
Cross-site request forgery (CSRF) vulnerability in LOCKON EC-CUBE 2.11.0 up to and including 2.13.3 allows remote malicious users to hijack the authentication of arbitrary users for requests that write to PHP scripts, related to the doValidToken function.
Lockon Ec-cube 2.11.0Lockon Ec-cube 2.11.1Lockon Ec-cube 2.12.1Lockon Ec-cube 2.12.0Lockon Ec-cube 2.12.2Lockon Ec-cube 2.12.3Lockon Ec-cube 2.11.3Lockon Ec-cube 2.11.5Lockon Ec-cube 2.12.5Lockon Ec-cube 2.13.0Lockon Ec-cube 2.13.2Lockon Ec-cube 2.11.2Lockon Ec-cube 2.11.4Lockon Ec-cube 2.12.6Lockon Ec-cube 2.13.1
NA
CVE-2013-5994
data/class/pages/mypage/LC_Page_Mypage_DeliveryAddr.php in LOCKON EC-CUBE 2.11.2 up to and including 2.13.0 allows remote malicious users to obtain sensitive information via a direct request, which reveals the full path in an error message.
Lockon Ec-cube 2.12.2Lockon Ec-cube 2.12.1Lockon Ec-cube 2.12.0Lockon Ec-cube 2.11.5Lockon Ec-cube 2.12.3enp2Lockon Ec-cube 2.12.3enLockon Ec-cube 2.11.3Lockon Ec-cube 2.12.6enLockon Ec-cube 2.13.0Lockon Ec-cube 2.12.5enLockon Ec-cube 2.12.5Lockon Ec-cube 2.12.4enLockon Ec-cube 2.12.6Lockon Ec-cube 2.12.3enp1Lockon Ec-cube 2.12.3Lockon Ec-cube 2.11.4Lockon Ec-cube 2.11.2
NA
CVE-2013-5993
Cross-site request forgery (CSRF) vulnerability in LOCKON EC-CUBE 2.11.0 up to and including 2.13.0 allows remote malicious users to hijack the authentication of arbitrary users via unspecified vectors related to refusals.
Lockon Ec-cube 2.12.3Lockon Ec-cube 2.12.2Lockon Ec-cube 2.12.1Lockon Ec-cube 2.12.0Lockon Ec-cube 2.12.5Lockon Ec-cube 2.12.3enp2Lockon Ec-cube 2.12.3enLockon Ec-cube 2.11.5Lockon Ec-cube 2.11.3Lockon Ec-cube 2.12.6Lockon Ec-cube 2.12.6enLockon Ec-cube 2.13.0Lockon Ec-cube 2.12.5enLockon Ec-cube 2.11.1Lockon Ec-cube 2.11.0Lockon Ec-cube 2.12.4enLockon Ec-cube 2.12.3enp1Lockon Ec-cube 2.11.4Lockon Ec-cube 2.11.2
NA
CVE-2013-5996
Multiple cross-site scripting (XSS) vulnerabilities in shopping/payment.tpl components in LOCKON EC-CUBE 2.11.0 up to and including 2.13.0 allow remote malicious users to inject arbitrary web script or HTML via crafted values.
Lockon Ec-cube 2.12.3Lockon Ec-cube 2.12.2Lockon Ec-cube 2.12.1Lockon Ec-cube 2.12.0Lockon Ec-cube 2.11.5Lockon Ec-cube 2.12.6Lockon Ec-cube 2.12.4enLockon Ec-cube 2.12.3enp1Lockon Ec-cube 2.11.4Lockon Ec-cube 2.11.2Lockon Ec-cube 2.12.3enp2Lockon Ec-cube 2.12.3enLockon Ec-cube 2.11.3Lockon Ec-cube 2.11.1Lockon Ec-cube 2.12.6enLockon Ec-cube 2.13.0Lockon Ec-cube 2.12.5enLockon Ec-cube 2.12.5Lockon Ec-cube 2.11.0
NA
CVE-2013-3650
Directory traversal vulnerability in the lfCheckFileName function in data/class/pages/LC_Page_ResizeImage.php in LOCKON EC-CUBE prior to 2.12.5 allows remote malicious users to read arbitrary image files via vectors involving the image parameter to resize_image.php, a different v...
Lockon Ec-cube 2.12.0Lockon Ec-cube 2.12.2Lockon Ec-cubeLockon Ec-cube 2.12.1Lockon Ec-cube 2.12.3
NA
CVE-2013-3653
Multiple cross-site scripting (XSS) vulnerabilities in the RecommendSearch feature in the management screen in LOCKON EC-CUBE prior to 2.12.5 allow remote malicious users to inject arbitrary web script or HTML via vectors involving the rank parameter, a different vulnerability th...
Lockon Ec-cube 2.12.0Lockon Ec-cube 2.12.1Lockon Ec-cube 2.12.2Lockon Ec-cube 2.12.3Lockon Ec-cube
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
man-in-the-middleCVE-2024-34558CVE-2024-32674CVE-2024-34351XPath injectionCVE-2023-45866CVE-2024-25528CVE-2024-25517path traversal
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook