CVE-2013-5993
21.11.2013, 04:40
Cross-site request forgery (CSRF) vulnerability in LOCKON EC-CUBE 2.11.0 through 2.13.0 allows remote attackers to hijack the authentication of arbitrary users via unspecified vectors related to refusals.
| Vendor | Product | Version |
|---|---|---|
| lockon | ec-cube | 2.11.0 |
| lockon | ec-cube | 2.11.0:beta |
| lockon | ec-cube | 2.11.0:beta2 |
| lockon | ec-cube | 2.11.1 |
| lockon | ec-cube | 2.11.2 |
| lockon | ec-cube | 2.11.3 |
| lockon | ec-cube | 2.11.4 |
| lockon | ec-cube | 2.11.5 |
| lockon | ec-cube | 2.12.0 |
| lockon | ec-cube | 2.12.1 |
| lockon | ec-cube | 2.12.2 |
| lockon | ec-cube | 2.12.3 |
| lockon | ec-cube | 2.12.3en:en |
| lockon | ec-cube | 2.12.3enp1:enp1 |
| lockon | ec-cube | 2.12.3enp2:enp2 |
| lockon | ec-cube | 2.12.4en:en |
| lockon | ec-cube | 2.12.5 |
| lockon | ec-cube | 2.12.5en:en |
| lockon | ec-cube | 2.12.6 |
| lockon | ec-cube | 2.12.6en:en |
| lockon | ec-cube | 2.13.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References