CVE-2013-5996
21.11.2013, 04:40
Multiple cross-site scripting (XSS) vulnerabilities in shopping/payment.tpl components in LOCKON EC-CUBE 2.11.0 through 2.13.0 allow remote attackers to inject arbitrary web script or HTML via crafted values.
| Vendor | Product | Version |
|---|---|---|
| lockon | ec-cube | 2.11.0 |
| lockon | ec-cube | 2.11.0:beta |
| lockon | ec-cube | 2.11.0:beta2 |
| lockon | ec-cube | 2.11.1 |
| lockon | ec-cube | 2.11.2 |
| lockon | ec-cube | 2.11.3 |
| lockon | ec-cube | 2.11.4 |
| lockon | ec-cube | 2.11.5 |
| lockon | ec-cube | 2.12.0 |
| lockon | ec-cube | 2.12.1 |
| lockon | ec-cube | 2.12.2 |
| lockon | ec-cube | 2.12.3 |
| lockon | ec-cube | 2.12.3en:en |
| lockon | ec-cube | 2.12.3enp1:enp1 |
| lockon | ec-cube | 2.12.3enp2:enp2 |
| lockon | ec-cube | 2.12.4en:en |
| lockon | ec-cube | 2.12.5 |
| lockon | ec-cube | 2.12.5en:en |
| lockon | ec-cube | 2.12.6 |
| lockon | ec-cube | 2.12.6en:en |
| lockon | ec-cube | 2.13.0 |
𝑥
= Vulnerable software versions
References