Known vulnerabilities in EC-CUBE - page 2

Vendor: ec-cube.net
Software: EC-CUBE
Software CPE: cpe:2.3:a:ec-cube_net:ec-cube:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 45
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting EC-CUBE EC-CUBE is affected by 45 known vulnerabilities: 1 high, 19 medium, 25 low Critical High Medium Low

Vulnerabilities (45)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU40330 - Cross-Site Request Forgery (CSRF)
CVE-2016-1201		 CWE-352 High
No
No
 - 30.04.2016 SB2016043001
#VU40331 - Improper Access Control
CVE-2016-1200		 CWE-284 Medium
No
No
 - 30.04.2016 SB2016043001
#VU40332 - Exposure of sensitive information to an unauthorized actor
CVE-2016-1199		 CWE-200 Medium
No
No
 - 30.04.2016 SB2016043001
#VU40625 - Cross-Site Request Forgery (CSRF)
CVE-2015-5665		 CWE-352 Medium
No
No
 - 27.10.2015 SB2015102704
#VU42117 - Improper input validation
CVE-2014-0807		 CWE-20 Medium
No
No
 - 22.01.2014 SB2014012201
#VU42118 - Improper input validation
CVE-2014-0808		 CWE-20 Medium
No
No
 - 22.01.2014 SB2014012201
SB2024053016
#VU42340 - Cross-Site Request Forgery (CSRF)
CVE-2013-5993		 CWE-352 Medium
No
No
 - 21.11.2013 SB2013112101
#VU42341 - Exposure of sensitive information to an unauthorized actor
CVE-2013-5994		 CWE-200 Medium
No
No
 - 21.11.2013 SB2013112101
#VU42342 - Exposure of sensitive information to an unauthorized actor
CVE-2013-5995		 CWE-200 Low
No
No
 - 21.11.2013 SB2013112101
#VU42343 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-5996		 CWE-79 Low
No
No
 - 21.11.2013 SB2013112101
#VU42347 - Exposure of sensitive information to an unauthorized actor
CVE-2013-5991		 CWE-200 Medium
No
No
 - 21.11.2013 SB2013112102
#VU42348 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-5992		 CWE-79 Low
No
No
 - 21.11.2013 SB2013112102
#VU42614 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2013-4702		 CWE-22 Medium
No
No
 - 31.08.2013 SB2013083101
#VU42764 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-3652		 CWE-79 Low
No
No
 - 30.06.2013 SB2013063001
#VU42765 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-3653		 CWE-79 Low
No
No
 - 30.06.2013 SB2013063002
#VU42766 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2013-3654		 CWE-22 Medium
No
No
 - 30.06.2013 SB2013063001
#VU42767 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2013-3650		 CWE-22 Medium
No
No
 - 30.06.2013 SB2013063002
#VU42768 - Improper Control of Generation of Code ('Code Injection')
CVE-2013-3651		 CWE-94 Medium
No
No
 - 30.06.2013 SB2013063001
#VU42824 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-2314		 CWE-79 Low
No
No
 - 29.05.2013 SB2013052903
#VU42825 - Improper input validation
CVE-2013-2315		 CWE-20 Medium
No
No
 - 29.05.2013 SB2013052903


Showing elements 21 - 40 out of 45