lockon ec-cube 3.0.7 vulnerabilities and exploits

(subscribe to this query)

5.3

CVSSv3

The login page in the management screen in LOCKON EC-CUBE 3.0.0 up to and including 3.0.9 allows remote malicious users to bypass intended IP address restrictions via unspecified vectors, a different vulnerability than CVE-2016-1200.

Lockon Ec-cube 3.0.0 Lockon Ec-cube 3.0.9 Lockon Ec-cube 3.0.8 Lockon Ec-cube 3.0.7 Lockon Ec-cube 3.0.6 Lockon Ec-cube 3.0.4 Lockon Ec-cube 3.0.2 Lockon Ec-cube 3.0.5 Lockon Ec-cube 3.0.3 Lockon Ec-cube 3.0.1

8.8

CVSSv3

Cross-site request forgery (CSRF) vulnerability in LOCKON EC-CUBE 3.0.0 up to and including 3.0.9 allows remote malicious users to hijack the authentication of administrators.

Lockon Ec-cube 3.0.4 Lockon Ec-cube 3.0.3 Lockon Ec-cube 3.0.2 Lockon Ec-cube 3.0.1 Lockon Ec-cube 3.0.6 Lockon Ec-cube 3.0.5 Lockon Ec-cube 3.0.9 Lockon Ec-cube 3.0.8 Lockon Ec-cube 3.0.7 Lockon Ec-cube 3.0.0

6.3

CVSSv3

The management screen in LOCKON EC-CUBE 3.0.7 up to and including 3.0.9 allows remote authenticated users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2016-1199.

Lockon Ec-cube 3.0.8 Lockon Ec-cube 3.0.9 Lockon Ec-cube 3.0.7

8.1

CVSSv3

Session fixation vulnerability in EC-CUBE (EC-CUBE 3.0.0, EC-CUBE 3.0.1, EC-CUBE 3.0.2, EC-CUBE 3.0.3, EC-CUBE 3..4, EC-CUBE 3.0.5, EC-CUBE 3.0.6, EC-CUBE 3.0.7, EC-CUBE 3.0.8, EC-CUBE 3.0.9, EC-CUBE 3.0.10, EC-CUBE 3.0.11, EC-CUBE 3.0.12, EC-CUBE 3.0.12-p1, EC-CUBE 3.0.13, EC-CU...

Lockon Ec-cube

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook