Skip to content
Lockon vulnerabilities
Newest
-
ec-cube co.,ltd. ec-cube
Session fixation vulnerability in EC-CUBE (EC-CUBE 3.0.0, EC-CUBE 3.0.1, EC-CUBE 3.0.2, EC-CUBE 3...
CVE-2018-0564
8.1 High
-
lockon ec-cube
Cross-site request forgery (CSRF) vulnerability in LOCKON EC-CUBE 3.0.0 through 3.0.9 allows...
CVE-2016-1201
8.8 High
-
lockon ec-cube
The management screen in LOCKON EC-CUBE 3.0.7 through 3.0.9 allows remote authenticated users to...
CVE-2016-1200
6.3 Medium
-
lockon ec-cube
The login page in the management screen in LOCKON EC-CUBE 3.0.0 through 3.0.9 allows remote...
CVE-2016-1199
5.3 Medium
-
lockon ec-cube
Cross-site request forgery (CSRF) vulnerability in LOCKON EC-CUBE 2.11.0 through 2.13.3 allows...
CVE-2015-5665
5.1 Medium
-
ec-cube co.,ltd. ec-cube, s‑cubism inc. ec-orange +1 more
EC-CUBE vulnerable to authorization bypass
CVE-2014-0808
Fix available
5.0 Medium
-
lockon ec-cube
data/class/pages/shopping/LC_Page_Shopping_Deliv.php in LOCKON EC-CUBE 2.4.4 and earlier, and 2...
CVE-2014-0807
6.4 Medium
-
lockon ec-cube
Multiple cross-site scripting (XSS) vulnerabilities in shopping/payment.tpl components in LOCKON...
CVE-2013-5996
4.3 Medium
-
lockon ec-cube
data/class/helper/SC_Helper_Address.php in the front-features implementation in LOCKON EC-CUBE 2...
CVE-2013-5995
5.5 Medium
-
lockon ec-cube
data/class/pages/mypage/LC_Page_Mypage_DeliveryAddr.php in LOCKON EC-CUBE 2.11.2 through 2.13.0...
CVE-2013-5994
5.0 Medium
-
lockon ec-cube
Cross-site request forgery (CSRF) vulnerability in LOCKON EC-CUBE 2.11.0 through 2.13.0 allows...
CVE-2013-5993
6.8 Medium
-
lockon ec-cube
Cross-site scripting (XSS) vulnerability in the displaySystemError function in html/handle_error...
CVE-2013-5992
4.3 Medium
-
lockon ec-cube
The displaySystemError function in html/handle_error.php in LOCKON EC-CUBE 2.11.0 through 2.11.5...
CVE-2013-5991
4.3 Medium
-
lockon ec-cube
Multiple directory traversal vulnerabilities in the doApiAction function in data/class/api...
CVE-2013-4702
5.0 Medium
-
lockon ec-cube
Directory traversal vulnerability in LOCKON EC-CUBE 2.12.0 through 2.12.4 allows remote attackers...
CVE-2013-3654
5.0 Medium
-
lockon ec-cube
LOCKON EC-CUBE 2.11.2 through 2.12.4 allows remote attackers to conduct unspecified PHP code...
CVE-2013-3651
Public exploit
7.5 High
-
lockon ec-cube
Directory traversal vulnerability in the lfCheckFileName function in data/class/pages...
CVE-2013-3650
5.0 Medium
-
lockon ec-cube
Multiple cross-site scripting (XSS) vulnerabilities in the RecommendSearch feature in the...
CVE-2013-3653
4.3 Medium
-
lockon ec-cube
Cross-site scripting (XSS) vulnerability in data/class/pages/products/LC_Page_Products_List.php...
CVE-2013-3652
4.3 Medium
-
lockon ec-cube
data/class/pages/forgot/LC_Page_Forgot.php in LOCKON EC-CUBE 2.11.0 through 2.12.3enP2 does not...
CVE-2013-2315
5.0 Medium
-
lockon ec-cube
Cross-site scripting (XSS) vulnerability in the adminAuthorization function in data/class/helper...
CVE-2013-2314
4.3 Medium
-
lockon ec-cube
Session fixation vulnerability in LOCKON EC-CUBE 2.11.0 through 2.12.3enP2 allows remote...
CVE-2013-2313
4.0 Medium
-
lockon ec-cube
Cross-site scripting (XSS) vulnerability in the shopping-cart screen in LOCKON EC-CUBE 2.11.0...
CVE-2013-2312
4.3 Medium
-
lockon ec-cube
SQL injection vulnerability in data/class/SC_Query.php in EC-CUBE 2.11.0 through 2.11.2 allows...
CVE-2011-3988
7.5 High
-
lockon ec-cube
Cross-site request forgery (CSRF) vulnerability in EC-CUBE before 2.11.0 allows remote attackers...
CVE-2011-1325
5.8 Medium
-
lockon ec-cube
EC-CUBE XSS Vulnerabilities
CVE-2011-0451
Fix available
4.3 Medium