CVE-2008-4991

HIGH 7.5CVE-2008-4991 · Published 06/11/2008 · updated 16/06/2026

In short

CVE-2008-4991 is a HIGH (CVSS 7.5) vulnerability affecting ec-cube (ec-cube).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 64.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
ec-cube ec-cube	`= 1.3.4≤ 1.3.5≤ 1.4.7≤ 1.5.0≤ 2.3.0`	No fix yet

Description

SQL injection vulnerability in LOCKON CO.,LTD. EC-CUBE 2.3.0 and earlier, 1.4.7 and earlier, and 1.5.0-beta2 and earlier; and Community Edition 1.3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the parameter.

References

More vulnerabilities in ec-cube

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

ec-cube

= 1.3.4≤ 1.3.5≤ 1.4.7≤ 1.5.0≤ 2.3.0

No fix yet

More vulnerabilities in ec-cube

See all →