Skip to contentEc-cube Co.,ltd. 4 Series vulnerabilities
- ec-cube, ec-cube co.,ltd. 4 series +1 moreAcceptance of extraneous untrusted data with trusted data vulnerability exists in EC-CUBE 4...CVE-2024-419247.2 High
- ec-cube, ec-cube co.,ltd. 3 series, 4 series +2 moreEC-CUBE 3 series (3.0.0 to 3.0.18-p6) and 4 series (4.0.0 to 4.0.6-p3, 4.1.0 to 4.1.2-p2, and 4.2...CVE-2023-468457.2 High
- ec-cube, ec-cube co.,ltd. 4 series +1 moreCross-site scripting vulnerability in Authentication Key Settings of EC-CUBE 4.0.0 to 4.0.6-p2,...CVE-2023-250775.4 Medium
- ec-cube, ec-cube co.,ltd. 4 series +1 moreCross-site scripting vulnerability in Product List Screen and Product Detail Screen of EC-CUBE 4...CVE-2023-228385.4 Medium
- ec-cube, ec-cube co.,ltd. 4 series, ec-cube 3 series, and ec-cube 2 series +1 moreCross-site scripting vulnerability in Contents Management of EC-CUBE 4 series (EC-CUBE 4.0.0 to 4...CVE-2023-224385.4 Medium
- ec-cube, ec-cube co.,ltd. 3 series and ec-cube 4 series +1 moreEC-CUBE Directory traversal vulnerabilityCVE-2022-401992.7 Low
- ec-cube, ec-cube co.,ltd. 4 series +1 moreEC-CUBE DOM-based cross-site scripting vulnerabilityCVE-2022-389755.4 Medium
- ec-cube, ec-cube co.,ltd. 3 series and ec-cube 4 series +1 moreEC-CUBE improperly handles HTTP Host header valuesCVE-2022-25355Fix available5.3 Medium