5.8
CVSSv2

CVE-2011-1325

Published: 13/05/2011 Updated: 26/05/2011
CVSS v2 Base Score: 5.8 | Impact Score: 4.9 | Exploitability Score: 8.6
VMScore: 516
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:P

Vulnerability Summary

Cross-site request forgery (CSRF) vulnerability in EC-CUBE prior to 2.11.0 allows remote malicious users to hijack the authentication of unspecified victims via unknown vectors.

Vulnerable Product Search on Vulmon Subscribe to Product

lockon ec-cube 2.1.0

lockon ec-cube 2.2.0

lockon ec-cube 1.4.5

lockon ec-cube 1.4.6

lockon ec-cube 1.4.0

lockon ec-cube 1.4.1

lockon ec-cube 1.3.0

lockon ec-cube 2.4.4

lockon ec-cube 2.5.0

lockon ec-cube 2.3.3

lockon ec-cube 2.4.0

lockon ec-cube 1.4.3

lockon ec-cube 2.0.0

lockon ec-cube 1.5.0

lockon ec-cube 1.4.7

lockon ec-cube 1.1.0

lockon ec-cube 1.1.1

lockon ec-cube 1.3.1

lockon ec-cube 1.3.2

lockon ec-cube 2.4.1

lockon ec-cube 2.4.2

lockon ec-cube

lockon ec-cube 2.0.1

lockon ec-cube 2.3.0

lockon ec-cube 2.2.1

lockon ec-cube 1.3.4

lockon ec-cube 1.4.2

lockon ec-cube 2.11.0

lockon ec-cube 2.3.1

lockon ec-cube 2.1.2

lockon ec-cube 1.4.4

lockon ec-cube 1.3.3

lockon ec-cube 2.4.3

lockon ec-cube 1.2.0

lockon ec-cube 2.3.4