CVE-2014-0807

MEDIUM 6.4CVE-2014-0807 · Published 22/01/2014 · updated 17/06/2026

In short

CVE-2014-0807 is a MEDIUM (CVSS 6.4) vulnerability affecting ec-cube (lockon).
Chance of exploitation in the next 30 days (EPSS): 1.6%, higher than 75.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
ec-cube lockon	`= 2.11.0= 2.11.1= 2.11.2= 2.11.3= 2.11.4= 2.11.5= 2.12.0= 2.12.1= 2.12.2= 2.4.0= 2.4.1= 2.4.2= 2.4.3≤ 2.4.4`	No fix yet

Description

data/class/pages/shopping/LC_Page_Shopping_Deliv.php in LOCKON EC-CUBE 2.4.4 and earlier, and 2.11.0 through 2.12.2, allows remote attackers to modify data via unspecified vectors.

References

jvn.jp/en/jp/JVN17849447/index.html
jvndb.jvn.jp/jvndb/JVNDB-2014-000005
ec-cube.net/info/weakness/weakness.php · Exploit

More vulnerabilities in ec-cube

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free