Ec-Cube Co.,ltd. Ec-Cube 2 Series
3 CVEs affecting Ec-Cube Co.,ltd. Ec-Cube 2 Series. Latest disclosed: 2023-08-17. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-20842 | Medium | 6.5 | 2021-11-24 | Cross-site request forgery (CSRF) vulnerability in EC-CUBE 2 series 2.11.0 to 2.17.1 allows a remote attacker to hijack the authentication of Administrator and… |
CVE-2021-20841 | Medium | 6.5 | 2021-11-24 | Improper access control in Management screen of EC-CUBE 2 series 2.11.2 to 2.17.1 allows a remote authenticated attacker to bypass access restriction and to al… |
CVE-2023-40281 | Medium | 4.8 | 2023-08-17 | EC-CUBE 2.11.0 to 2.17.2-p1 contain a cross-site scripting vulnerability in "mail/template" and "products/product" of Management page. If this vulnerability i… |