Known vulnerabilities in EC-CUBE - page 3

Vendor: ec-cube.net
Software: EC-CUBE
Software CPE: cpe:2.3:a:ec-cube_net:ec-cube:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 45
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting EC-CUBE EC-CUBE is affected by 45 known vulnerabilities: 1 high, 19 medium, 25 low Critical High Medium Low

Vulnerabilities (45)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU42822 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-2312		 CWE-79 Low
No
No
 - 29.05.2013 SB2013052903
#VU42823 - Improper Authentication
CVE-2013-2313		 CWE-287 Medium
No
No
 - 29.05.2013 SB2013052903
#VU44580 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2011-3988		 CWE-89 Medium
No
No
 - 21.10.2011 SB2011102102
#VU45047 - Cross-Site Request Forgery (CSRF)
CVE-2011-1325		 CWE-352 Medium
No
No
 - 13.05.2011 SB2011020301
#VU45386 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2011-0451		 CWE-79 Low
No
No
 - 03.02.2011 SB2011020301


Showing elements 41 - 60 out of 45