Known vulnerabilities in EC-CUBE 3.0.0-beta3
Vendor:
ec-cube.net
Software:
EC-CUBE
Version:
3.0.0-beta3
Software CPE:
cpe:2.3:a:ec-cube_net:ec-cube:*:*:*:*:*:*:*:*
Total vulnerabilities:
4
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.7
Vulnerabilities by Severity
4.3.1-p1
4.2.3-p2
4.1.2-p5
4.1.2-p3
4.0.6-p4
4.1.2-p2
4.0.6-p3
3.0.18-p6
4.2.3
4.2.2
2.17.2-p1
2.13.5-p1
2.17.0
2.13.5
2.13.4
3.0.18-p5
4.2.0
4.1.2-p1
4.0.6-p2
4.2.1
3.0.18-p4
3.0.18-p3
4.1.2
20210729
20210408
20210401
20210325
20210318
20210311
20210304
20210225
20210218
20210204
20210121
20210114
20210107
20201217
20201210
20201203
20201119
20201112
20201105
20201022
20201015
20201008
20201001
20200924
20200827
20200806
20200521
20200430
20200416
20200409
20200312
20200213
20191212
20191128
20191114
20191031
20191017
20190930
20190912
20190905
20190829
20190822
20190808
20190718
20190710
20190613
20190508
20190417
20190404
20190313
20190306
4.1.2-20220203
4.1.2-20220128
4.1.1-20211130
4.1.1
4.1.0
4.1-rc
4.1-beta3-20210903
4.1-beta3-20210901
4.1-beta3-20210831
4.1-beta3
4.1-20220210
4.1-20211202
4.1-20211125
4.1-20211118
4.1-20211111
-
2.17.1
2.17.2
4.0.6-p1
4.0.6
3.0.18-p2
4.0.5-p1
4.1-beta2
4.1-beta
4.0.5-rc
4.0.0-rc
4.0-beta2
4.0-beta
3.n-alpha6
3.n-alpha5
3.n-alpha4
3.1.0-alpha3
3.1.0-alpha2
3.1.0-alpha
3.0.12-p1
3.0.11-RC
3.0.11-pre
3.0.0-beta4
3.0.0-beta3
3.0.0-beta2
3.0.0-beta1
3.0.0-beta0
3.0.0-alpha
2.13.3
2.13.0-beta
2.12.6en-p1
2.12.3en-p2
2.12.3en-p1
2.12.0-beta2
2.12.0-beta
2.12.0-alpha
2.11.0-beta2
2.11.0-beta
2.5.0-alpha2
2.5.0-alpha
2.4.0-rc1
2.3.0-rc1
2.2.0-beta
2.1.0-beta
2.0.1a
2.0.0-beta
2
1.5.0-beta
1.4.5-rel
1.4.4-beta
1.4.3b-beta
1.4.3a-beta
1.4.3-beta
1.4.2-beta-beta
1.4.1-beta-beta
1.4.0a-beta-dev
1.4.0-beta-dev
1.3.4-rel
1.3.4-comu
1.3.3-rel
1.3.2-rel
1.3.1a-rel
1.3.1-rel
1.3.0-beta
1.2.0-beta
1.1.0-deta
4.0.5
2.5.0
2.4.4
2.3.4
2.3.3
2.3.1
2.2.1
2.2.0
2.1.2
2.1.0
2.0.1
2.0.0
1.4.6
1.4.5
1.4.4
1.4.3
1.4.2
1.4.1
1.4.0
1.3.3
1.3.2
1.3.1
1.3.0
1.2.0
1.1.1
1.1.0
2.12.4
2.12.6en
2.12.5en
2.12.4en
2.12.3enp2
2.12.3enp1
2.12.3en
2.4.3
2.4.2
2.4.1
2.4.0
2.13.2
2.13.1
2.13.0
2.12.6
2.12.5
2.12.3
2.12.2
2.12.1
2.12.0
2.11.5
2.11.4
2.11.3
2.11.2
2.11.1
2.11.0
4.0.4
4.0.3
4.0.2
4.0.1
4.0.0
3.0.18
3.0.17
3.0.16
3.0.15
3.0.14
3.0.13
3.0.12
3.0.11
3.0.10
3.0.9
3.0.8
3.0.7
3.0.6
3.0.5
3.0.4
3.0.3
3.0.2
3.0.1
3.0.0
1.3.5
1.3.4
2.3.0
1.5.0
2.1.2a
1.4.7
1.0
Vulnerabilities (4)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU82795 - Improper Control of Generation of Code ('Code Injection') CVE-2023-46845 |
CWE-94 | Low | 4.2.3 | 07.11.2023 |
SB2023110704 |
||
| #VU72610 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-22438 |
CWE-79 | Low | 4.2.1 | 28.02.2023 |
SB2023022808 |
||
| #VU67391 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2022-40199 |
CWE-22 | Low | - | 15.09.2022 |
SB2022091516 |
||
| #VU60745 - Improper Control of Dynamically-Managed Code Resources CVE-2022-25355 |
CWE-913 | Low | 4.1.2 | 22.02.2022 |
SB2022022201 |