Skip to content
Ec-cube vulnerabilities
Newest
-
ec-cube, ec-cube co.,ltd. 4.1 series, 4.2 series +1 more +3 more
EC-CUBE provided by EC-CUBE CO.,LTD. contains a multi-factor authentication (MFA) bypass...
CVE-2026-30777
6.9 Medium
-
ec-cube, ec-cube co.,ltd. 4 series +1 more
Acceptance of extraneous untrusted data with trusted data vulnerability exists in EC-CUBE 4...
CVE-2024-41924
7.2 High
-
ec-cube, ec-cube co.,ltd. 3 series, 4 series +2 more
EC-CUBE 3 series (3.0.0 to 3.0.18-p6) and 4 series (4.0.0 to 4.0.6-p3, 4.1.0 to 4.1.2-p2, and 4.2...
CVE-2023-46845
7.2 High
-
ec-cube, ec-cube 2, ec-cube co.,ltd. 2 series +2 more
EC-CUBE 2.11.0 to 2.17.2-p1 contain a cross-site scripting vulnerability in "mail/template" and ...
CVE-2023-40281
4.8 Medium
-
ec-cube, ec-cube co.,ltd. 4 series +1 more
Cross-site scripting vulnerability in Authentication Key Settings of EC-CUBE 4.0.0 to 4.0.6-p2,...
CVE-2023-25077
5.4 Medium
-
ec-cube, ec-cube co.,ltd. 4 series +1 more
Cross-site scripting vulnerability in Product List Screen and Product Detail Screen of EC-CUBE 4...
CVE-2023-22838
5.4 Medium
-
ec-cube, ec-cube co.,ltd. 4 series, ec-cube 3 series, and ec-cube 2 series +1 more
Cross-site scripting vulnerability in Contents Management of EC-CUBE 4 series (EC-CUBE 4.0.0 to 4...
CVE-2023-22438
5.4 Medium
-
ec-cube, ec-cube co.,ltd. 3 series and ec-cube 4 series +1 more
EC-CUBE Directory traversal vulnerability
CVE-2022-40199
2.7 Low
-
ec-cube, ec-cube co.,ltd. 4 series +1 more
EC-CUBE DOM-based cross-site scripting vulnerability
CVE-2022-38975
5.4 Medium
-
ec-cube product image bulk upload, ec-cube co.,ltd. product image bulk upload plugin +1 more
EC-CUBE plugin 'Product Image Bulk Upload Plugin' 1.0.0 and 4.1.0 contains an insufficient...
CVE-2022-37346
9.8 Critical
-
ec-cube, ec-cube co.,ltd. 3 series and ec-cube 4 series +1 more
EC-CUBE improperly handles HTTP Host header values
CVE-2022-25355
Fix available
5.3 Medium
-
ec-cube co.,ltd. plugin 'mail magazine management plugin', ec-cube e-mail newsletter management +1 more
Cross-site request forgery (CSRF) vulnerability in EC-CUBE plugin 'Mail Magazine Management...
CVE-2022-21179
4.3 Medium
-
ec-cube, ec-cube co.,ltd. 2 series +1 more
EC-CUBE Cross-site request forgery (CSRF) vulnerability
CVE-2021-20842
Fix available
6.5 Medium
-
ec-cube, ec-cube co.,ltd. 2 series +1 more
EC-CUBE Improper access control in Management screen
CVE-2021-20841
Fix available
6.5 Medium
-
ec-cube
EC-CUBE Improper access control vulnerability
CVE-2021-20778
Fix available
7.5 High
-
ec-cube
EC-CUBE Cross-site scripting vulnerability
CVE-2021-20751
Fix available
6.1 Medium
-
ec-cube
EC-CUBE Cross-site scripting vulnerability
CVE-2021-20750
Fix available
6.1 Medium
-
ec-cube co.,ltd. category contents plugin (for ec-cube 3.0 series), ec-cube business form output +1 more
Cross-site scripting vulnerability in EC-CUBE Category contents plugin (for EC-CUBE 3.0 series)...
CVE-2021-20744
6.1 Medium
-
ec-cube email newsletters management, ec-cube co.,ltd. email newsletters management plugin (for ec-cube 3.0 series) +1 more
Cross-site scripting vulnerability in EC-CUBE Email newsletters management plugin (for EC-CUBE 3...
CVE-2021-20743
6.1 Medium
-
ec-cube business form output, ec-cube co.,ltd. business form output plugin (for ec-cube 3.0 series) +1 more
Cross-site scripting vulnerability in EC-CUBE Business form output plugin (for EC-CUBE 3.0 series...
CVE-2021-20742
6.1 Medium
-
ec-cube delivery slip number, delivery slip number csv bulk registration, delivery slip number mail +1 more +3 more
Cross-site scripting vulnerability in ETUNA EC-CUBE plugins (Delivery slip number plugin (3.0...
CVE-2021-20735
6.1 Medium
-
ec-cube
EC-CUBE Cross-site scripting vulnerability
CVE-2021-20717
Public exploit
6.1 Medium
-
ec-cube
EC-CUBE Improper input validation vulnerability
CVE-2020-5680
7.5 High
-
ec-cube
EC-CUBE Improper Restriction of Rendered UI Layers or Frames
CVE-2020-5679
6.1 Medium
-
ec-cube
EC-CUBE Directory traversal vulnerability
CVE-2020-5590
Fix available
8.1 High
-
ec-cube amazon pay, ltd." ec-cube plugin 'amazon pay plugin 2.12,2.13' +1 more
Cross-site scripting vulnerability in EC-CUBE plugin 'Amazon Pay Plugin 2.12,2.13' version 2.4.2...
CVE-2019-6003
6.1 Medium
-
ec-cube
EC-CUBE Open redirect vulnerability
CVE-2018-16191
Fix available
6.1 Medium
-
ec-cube payment module, gmo payment gateway, inc. ec-cube payment module and gmo-pg payment module (pg multi-payment service) for ec-cube +1 more
Input validation issue in EC-CUBE Payment Module (2.12) version 3.5.23 and earlier, EC-CUBE...
CVE-2018-0658
7.2 High
-
ec-cube payment module, gmo payment gateway, inc. ec-cube payment module and gmo-pg payment module (pg multi-payment service) for ec-cube +1 more
Cross-site scripting vulnerability in EC-CUBE Payment Module and GMO-PG Payment Module (PG Multi...
CVE-2018-0657
4.8 Medium
-
ec-cube discount coupon
SQL injection vulnerability in the Seed Coupon plugin before 1.6 for EC-CUBE allows remote...
CVE-2016-4837
9.8 Critical
-
ec-cube ver2
The process function in data/class/pages/admin/customer/LC_Page_Admin_Customer_SearchCustomer.php...
CVE-2009-4236
5.0 Medium
-
ec-cube
SQL injection vulnerability in LOCKON CO.,LTD. EC-CUBE 2.3.0 and earlier, 1.4.7 and earlier, and...
CVE-2008-4991
7.5 High
-
ec-cube
Cross-site scripting (XSS) vulnerability in EC-CUBE Ver1 1.4.6 and earlier, Ver1 Beta 1.5.0-beta...
CVE-2008-4537
4.3 Medium
-
ec-cube
Cross-site scripting (XSS) vulnerability in EC-CUBE Ver1 1.4.6 and earlier, Ver1 Beta 1.5.0-beta...
CVE-2008-4536
4.3 Medium
-
ec-cube
Cross-site scripting (XSS) vulnerability in EC-CUBE Ver2 2.1.2a and earlier, EC-CUBE Ver2 Beta(RC...
CVE-2008-4535
4.3 Medium
-
ec-cube
SQL injection vulnerability in EC-CUBE Ver2 2.1.2a and earlier, and Ver2 RC 2.3.0-rc1 and earlier...
CVE-2008-4534
7.5 High
-
ec-cube
Cross-site scripting (XSS) vulnerability in EC-CUBE before 1.0.1a-beta allows remote attackers to...
CVE-2006-6108
4.3 Medium