CVE-2014-0807 data/class/pages/shopping/LC_Page_Shopping_Deliv.php in LOCKON EC-CUBE 2.4.4 and earlier, and 2.11.0 through 2.12.2, allows remote attackers to modify data via unspecified vectors.
MediumCVSS 6.4
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
data/class/pages/shopping/LC_Page_Shopping_Deliv.php in LOCKON EC-CUBE 2.4.4 and earlier, and 2.11.0 through 2.12.2, allows remote attackers to modify data via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lockon ec-cube | <= 2.4.4 | No fix listed |
| lockon ec-cube | = 2.4.0 | No fix listed |
| lockon ec-cube | = 2.4.0-rc1 | No fix listed |
| lockon ec-cube | = 2.4.1 | No fix listed |
| lockon ec-cube | = 2.4.2 | No fix listed |
| lockon ec-cube | = 2.4.3 | No fix listed |
| lockon ec-cube | = 2.11.0 | No fix listed |
| lockon ec-cube | = 2.11.0-beta | No fix listed |
| lockon ec-cube | = 2.11.0-beta2 | No fix listed |
| lockon ec-cube | = 2.11.1 | No fix listed |
| lockon ec-cube | = 2.11.2 | No fix listed |
| lockon ec-cube | = 2.11.3 | No fix listed |
| lockon ec-cube | = 2.11.4 | No fix listed |
| lockon ec-cube | = 2.11.5 | No fix listed |
| lockon ec-cube | = 2.12.0 | No fix listed |
| lockon ec-cube | = 2.12.1 | No fix listed |
| lockon ec-cube | = 2.12.2 | No fix listed |
References
- JVN#17849447 third-party-advisory
- JVNDB-2014-000005 third-party-advisory
- www.ec-cube.net exploit vendor-advisory