PT-2013-4544
CVE-2013-3651
·
تاريخ النشر
2013-06-29
·
تاريخ التحديث
2013-10-11
الوصف من
CVSS 2.0
7.5
عاليةالمقاييسAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
LOCKON EC-CUBE versions 2.11.2 through 2.12.4
Description
The issue allows remote attackers to conduct unspecified PHP code-injection attacks via a crafted string, related to data/class/SC CheckError.php and data/class/SC FormParam.php.
Recommendations
For versions 2.11.2 through 2.12.4, consider restricting access to the affected PHP files, specifically data/class/SC CheckError.php and data/class/SC FormParam.php, until a patch is available. As a temporary workaround, avoid using crafted strings that could lead to PHP code-injection attacks.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾