CVE-2013-5995 data/class/helper/SC_Helper_Address.php in the front-features implementation in LOCKON EC-CUBE 2.12.3 through 2.13.0 allows remote authenticated users to obtain sensitive information via unspecified v...
MediumCVSS 5.5
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
data/class/helper/SC_Helper_Address.php in the front-features implementation in LOCKON EC-CUBE 2.12.3 through 2.13.0 allows remote authenticated users to obtain sensitive information via unspecified vectors related to addresses.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lockon ec-cube | = 2.12.3 | No fix listed |
| lockon ec-cube | = 2.12.3en | No fix listed |
| lockon ec-cube | = 2.12.3enp1 | No fix listed |
| lockon ec-cube | = 2.12.3enp2 | No fix listed |
| lockon ec-cube | = 2.12.4en | No fix listed |
| lockon ec-cube | = 2.12.5 | No fix listed |
| lockon ec-cube | = 2.12.5en | No fix listed |
| lockon ec-cube | = 2.12.6 | No fix listed |
| lockon ec-cube | = 2.12.6en | No fix listed |
| lockon ec-cube | = 2.13.0 | No fix listed |
References
- JVN#55630933 third-party-advisory
- JVNDB-2013-000106 third-party-advisory
- svn.ec-cube.net exploit patch
- www.ec-cube.net exploit patch