CVE-2018-0658
07.09.2018, 14:29
Input validation issue in EC-CUBE Payment Module (2.12) version 3.5.23 and earlier, EC-CUBE Payment Module (2.11) version 2.3.17 and earlier, GMO-PG Payment Module (PG Multi-Payment Service) (2.12) version 3.5.23 and earlier, GMO-PG Payment Module (PG Multi-Payment Service) (2.11) version 2.3.17 and earlier allows an attacker with administrative rights to execute arbitrary PHP code on the server via unspecified vectors.Enginsight
| Vendor | Product | Version |
|---|---|---|
| ec-cube | ec-cube_payment_module | 𝑥 ≤ 2.3.17 |
| gmo-pg | gmo-pg_payment_module | 𝑥 ≤ 2.3.17 |
| ec-cube | ec-cube_payment_module | 𝑥 ≤ 3.5.23 |
| gmo-pg | gmo-pg_payment_module | 𝑥 ≤ 3.5.23 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration