Advisories · Technology

EC-CUBE CO.,LTD. EC-CUBE 4 series.

Every CVE that names EC-CUBE CO.,LTD. EC-CUBE 4 series among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-41924 CVE record

CVSS 7.2 High

Acceptance of extraneous untrusted data with trusted data vulnerability exists in EC-CUBE 4 series.
- EC-CUBE CO.,LTD. EC-CUBE 4 series
- CWE-349
Not analysed yet 30 Jul 2024
CVE-2023-46845 CVE record

EC-CUBE 3 series (3.0.0 to 3.0.18-p6) and 4 series (4.0.0 to 4.0.6-p3, 4.1.0 to 4.1.2-p2, and 4.2.0 to 4.2.2) contain an arbitrary code execution vulnerability due to improper settings of the templat…
- EC-CUBE CO.,LTD. EC-CUBE 4 series
- EC-CUBE CO.,LTD. EC-CUBE 3 series
Not analysed yet 7 Nov 2023
CVE-2023-25077 CVE record

Cross-site scripting vulnerability in Authentication Key Settings of EC-CUBE 4.0.0 to 4.0.6-p2, EC-CUBE 4.1.0 to 4.1.2-p1, and EC-CUBE 4.2.0 allows a remote authenticated attacker to inject an arbitr…
- EC-CUBE CO.,LTD. EC-CUBE 4 series
Not analysed yet 5 Mar 2023
CVE-2023-22838 CVE record

Cross-site scripting vulnerability in Product List Screen and Product Detail Screen of EC-CUBE 4.0.0 to 4.0.6-p2, EC-CUBE 4.1.0 to 4.1.2-p1, and EC-CUBE 4.2.0 allows a remote authenticated attacker t…
- EC-CUBE CO.,LTD. EC-CUBE 4 series
Not analysed yet 5 Mar 2023