SQL Injection in Lockon Ec-Cube

CVE-2011-3988

SQL injection vulnerability in data/class/SC_Query.php in EC-CUBE 2.11.0 through 2.11.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Vulnerability class: SQL Injection

EPSS: 0.023 (81.8th percentile) — read the EPSS interpretation.

Affected products

  • Lockon Ec-cube — versions 2.11.0, 2.11.1, 2.11.2
  • N/a — versions n/a

Weakness classification (CWE)

References