EC
Product
Ec-cube
26
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 14Low 1
Watch
Add Ec-cube to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-5590 | 8.1 | Jun 19 | Directory traversal vulnerability in EC-CUBE 3.0.0 to 3.0.18 and 4.0.0 to 4.0.3 allows remote authenticated attackers to delete arbitrary files and/or directories on the server… Affected: 3.0.0 through 3.0.18; 4.0.0 through 4.0.3 |
| CVE-2021-20778 | 7.5 | Jul 1 | Improper access control vulnerability in EC-CUBE 4.0.6 (EC-CUBE 4 series) allows a remote attacker to bypass access restriction and obtain sensitive information via unspecified… Affected: 4.0.6 |
| CVE-2020-5680 | 7.5 | Dec 3 | Improper input validation vulnerability in EC-CUBE versions from 3.0.5 to 3.0.18 allows a remote attacker to cause a denial-of-service (DoS) condition via unspecified vector Affected: 3.0.5 through 3.0.18 |
| CVE-2024-41924 | 7.2 | Jul 30 | Acceptance of extraneous untrusted data with trusted data vulnerability exists in EC-CUBE 4 series Affected: 4.0.0 through 4.0.6-p4; 4.1.0 through 4.1.2-p3; 4.2.0 through 4.2.3 |
| CVE-2023-46845 | 7.2 | Nov 7 | EC-CUBE 3 series (3.0.0 to 3.0.18-p6) and 4 series (4.0.0 to 4.0.6-p3, 4.1.0 to 4.1.2-p2, and 4.2.0 to 4.2.2) contain an arbitrary code execution vulnerability due to improper… Affected: 3.0.0 through 3.0.18; 4.0.0 through 4.0.6; 4.1.0 through 4.1.2; 4.2.0 before 4.2.3; 3.0.18; 3.0.18; +9 more |
Showing 5