| Package | Affected versions | Patched versions |
|---|---|---|
| ec-cube | = 2.12.0= 2.12.1= 2.12.2= 2.12.3= 2.12.3en= 2.12.3enp1= 2.12.3enp2= 2.12.4= 2.12.4en= 2.12.5= 2.12.5en |
Multiple directory traversal vulnerabilities in the doApiAction function in data/class/api/SC_Api_Operation.php in LOCKON EC-CUBE 2.12.0 through 2.12.5 on Windows allow remote attackers to read arbitrary files via vectors involving a (1) Operation, (2) Service, (3) Style, (4) Validate, or (5) Version value.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free