EC-CUBE Directory traversal vulnerability

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2022-40199 · ADVISORY
• EC-CUBE/ec-cube · PACKAGE
• jvn.jp/en/jp/JVN21213852/index.html · WEB
• ec-cube.net/info/weakness/20220909 · WEB
• ec-cube.net/info/weakness/20220909 · Patch

Lỗ hổng khác của ec-cube/ec-cube

• GHSA-7rhv-h82h-vpjhTRUNG BÌNH 6.7EC-CUBE has a Vulnerability that Allows MFA Bypass in the Administrative Interface
• CVE-2022-38975TRUNG BÌNH 5.4DOM-based cross-site scripting vulnerability in EC-CUBE 4 series (EC-CUBE 4.0.0 to 4.1.2) allows a remote attacker to inject an arbitrary sc…
• CVE-2022-25355TRUNG BÌNH 5.3EC-CUBE 3.0.0 to 3.0.18-p3 and EC-CUBE 4.0.0 to 4.1.1 improperly handle HTTP Host header values, which may lead a remote unauthenticated att…
• CVE-2021-20842TRUNG BÌNH 6.5Cross-site request forgery (CSRF) vulnerability in EC-CUBE 2 series 2.11.0 to 2.17.1 allows a remote attacker to hijack the authentication o…
• CVE-2021-20841TRUNG BÌNH 6.5Improper access control in Management screen of EC-CUBE 2 series 2.11.2 to 2.17.1 allows a remote authenticated attacker to bypass access re…