Ec-Cube Co.,ltd. Ec-Cube 4 Series
5 CVEs affecting Ec-Cube Co.,ltd. Ec-Cube 4 Series. Latest disclosed: 2024-07-30. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-41924 | High | 7.2 | 2024-07-30 | Acceptance of extraneous untrusted data with trusted data vulnerability exists in EC-CUBE 4 series. If this vulnerability is exploited, an attacker who obtaine… |
CVE-2023-46845 | High | 7.2 | 2023-11-07 | EC-CUBE 3 series (3.0.0 to 3.0.18-p6) and 4 series (4.0.0 to 4.0.6-p3, 4.1.0 to 4.1.2-p2, and 4.2.0 to 4.2.2) contain an arbitrary code execution vulnerability… |
CVE-2023-25077 | Medium | 5.4 | 2023-03-06 | Cross-site scripting vulnerability in Authentication Key Settings of EC-CUBE 4.0.0 to 4.0.6-p2, EC-CUBE 4.1.0 to 4.1.2-p1, and EC-CUBE 4.2.0 allows a remote au… |
CVE-2023-22838 | Medium | 5.4 | 2023-03-06 | Cross-site scripting vulnerability in Product List Screen and Product Detail Screen of EC-CUBE 4.0.0 to 4.0.6-p2, EC-CUBE 4.1.0 to 4.1.2-p1, and EC-CUBE 4.2.0… |
CVE-2022-38975 | Medium | 5.4 | 2022-09-27 | DOM-based cross-site scripting vulnerability in EC-CUBE 4 series (EC-CUBE 4.0.0 to 4.1.2) allows a remote attacker to inject an arbitrary script by having an a… |