EC-CUBE Cross-site request forgery (CSRF) vulnerability

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2021-20842 · ADVISORY
• EC-CUBE/ec-cube · PACKAGE
• jvn.jp/en/jp/JVN75444925/index.html · WEB
• ec-cube.net/info/weakness/20211111 · WEB
• ec-cube.net/info/weakness/20211111 · Exploit

Lỗ hổng khác của ec-cube/ec-cube

• GHSA-7rhv-h82h-vpjhTRUNG BÌNH 6.7EC-CUBE has a Vulnerability that Allows MFA Bypass in the Administrative Interface
• CVE-2022-40199THẤP 2.7Directory traversal vulnerability in EC-CUBE 3 series (EC-CUBE 3.0.0 to 3.0.18-p4 ) and EC-CUBE 4 series (EC-CUBE 4.0.0 to 4.1.2) allows a r…
• CVE-2022-38975TRUNG BÌNH 5.4DOM-based cross-site scripting vulnerability in EC-CUBE 4 series (EC-CUBE 4.0.0 to 4.1.2) allows a remote attacker to inject an arbitrary sc…
• CVE-2022-25355TRUNG BÌNH 5.3EC-CUBE 3.0.0 to 3.0.18-p3 and EC-CUBE 4.0.0 to 4.1.1 improperly handle HTTP Host header values, which may lead a remote unauthenticated att…
• CVE-2021-20841TRUNG BÌNH 6.5Improper access control in Management screen of EC-CUBE 2 series 2.11.2 to 2.17.1 allows a remote authenticated attacker to bypass access re…