Lockon Ec-cube vulnerabilities

• ec-cube co.,ltd. ec-cube Session fixation vulnerability in EC-CUBE (EC-CUBE 3.0.0, EC-CUBE 3.0.1, EC-CUBE 3.0.2, EC-CUBE 3... CVE-2018-0564 8.1 HighApril 20, 2018
• lockon ec-cube Cross-site request forgery (CSRF) vulnerability in LOCKON EC-CUBE 3.0.0 through 3.0.9 allows... CVE-2016-1201 8.8 HighApril 30, 2016
• lockon ec-cube The management screen in LOCKON EC-CUBE 3.0.7 through 3.0.9 allows remote authenticated users to... CVE-2016-1200 6.3 MediumApril 30, 2016
• lockon ec-cube The login page in the management screen in LOCKON EC-CUBE 3.0.0 through 3.0.9 allows remote... CVE-2016-1199 5.3 MediumApril 30, 2016
• lockon ec-cube Cross-site request forgery (CSRF) vulnerability in LOCKON EC-CUBE 2.11.0 through 2.13.3 allows... CVE-2015-5665 5.1 MediumOctober 27, 2015
• ec-cube co.,ltd. ec-cube, s‑cubism inc. ec-orange +1 more EC-CUBE vulnerable to authorization bypass CVE-2014-0808 Fix available 5.0 MediumJanuary 22, 2014
• lockon ec-cube data/class/pages/shopping/LC_Page_Shopping_Deliv.php in LOCKON EC-CUBE 2.4.4 and earlier, and 2... CVE-2014-0807 6.4 MediumJanuary 22, 2014
• lockon ec-cube Multiple cross-site scripting (XSS) vulnerabilities in shopping/payment.tpl components in LOCKON... CVE-2013-5996 4.3 MediumNovember 21, 2013
• lockon ec-cube data/class/helper/SC_Helper_Address.php in the front-features implementation in LOCKON EC-CUBE 2... CVE-2013-5995 5.5 MediumNovember 21, 2013
• lockon ec-cube data/class/pages/mypage/LC_Page_Mypage_DeliveryAddr.php in LOCKON EC-CUBE 2.11.2 through 2.13.0... CVE-2013-5994 5.0 MediumNovember 21, 2013
• lockon ec-cube Cross-site request forgery (CSRF) vulnerability in LOCKON EC-CUBE 2.11.0 through 2.13.0 allows... CVE-2013-5993 6.8 MediumNovember 21, 2013
• lockon ec-cube Cross-site scripting (XSS) vulnerability in the displaySystemError function in html/handle_error... CVE-2013-5992 4.3 MediumNovember 21, 2013
• lockon ec-cube The displaySystemError function in html/handle_error.php in LOCKON EC-CUBE 2.11.0 through 2.11.5... CVE-2013-5991 4.3 MediumNovember 21, 2013
• lockon ec-cube Multiple directory traversal vulnerabilities in the doApiAction function in data/class/api... CVE-2013-4702 5.0 MediumAugust 30, 2013
• lockon ec-cube Directory traversal vulnerability in LOCKON EC-CUBE 2.12.0 through 2.12.4 allows remote attackers... CVE-2013-3654 5.0 MediumJune 29, 2013
• lockon ec-cube LOCKON EC-CUBE 2.11.2 through 2.12.4 allows remote attackers to conduct unspecified PHP code... CVE-2013-3651 Public exploit 7.5 HighJune 29, 2013
• lockon ec-cube Directory traversal vulnerability in the lfCheckFileName function in data/class/pages... CVE-2013-3650 5.0 MediumJune 29, 2013
• lockon ec-cube Multiple cross-site scripting (XSS) vulnerabilities in the RecommendSearch feature in the... CVE-2013-3653 4.3 MediumJune 29, 2013
• lockon ec-cube Cross-site scripting (XSS) vulnerability in data/class/pages/products/LC_Page_Products_List.php... CVE-2013-3652 4.3 MediumJune 29, 2013
• lockon ec-cube data/class/pages/forgot/LC_Page_Forgot.php in LOCKON EC-CUBE 2.11.0 through 2.12.3enP2 does not... CVE-2013-2315 5.0 MediumMay 29, 2013
• lockon ec-cube Cross-site scripting (XSS) vulnerability in the adminAuthorization function in data/class/helper... CVE-2013-2314 4.3 MediumMay 29, 2013
• lockon ec-cube Session fixation vulnerability in LOCKON EC-CUBE 2.11.0 through 2.12.3enP2 allows remote... CVE-2013-2313 4.0 MediumMay 29, 2013
• lockon ec-cube Cross-site scripting (XSS) vulnerability in the shopping-cart screen in LOCKON EC-CUBE 2.11.0... CVE-2013-2312 4.3 MediumMay 29, 2013
• lockon ec-cube SQL injection vulnerability in data/class/SC_Query.php in EC-CUBE 2.11.0 through 2.11.2 allows... CVE-2011-3988 7.5 HighOctober 21, 2011
• lockon ec-cube Cross-site request forgery (CSRF) vulnerability in EC-CUBE before 2.11.0 allows remote attackers... CVE-2011-1325 5.8 MediumMay 13, 2011
• lockon ec-cube EC-CUBE XSS Vulnerabilities CVE-2011-0451 Fix available 4.3 MediumFebruary 3, 2011