Approved changes feed: RSS · Atom

cpe:2.3:a:gmo-pg:gmo-pg_payment_module:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGmo Pg (574b2cfc-c412-5c15-bf73-e1bc51b6ad12)
ProductGmo Pg Payment Module (4ce68db3-efc1-5d4a-808a-eb694c8c3a6a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:gem/gmo-pg purl2cpe 2026-06-01 10:11:16.166403
pkg:github/kissy2go/gmo-pg purl2cpe 2026-06-01 10:11:16.166406

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-0658 vulnerable 2026-06-08 05:10:24.350038 Details available
Input validation issue in EC-CUBE Payment Module (2.12) version 3.5.23 and earlier, EC-CUBE Payment Module (2.11) version 2.3.17 and earlier, GMO-PG Payment Module (PG Multi-Payment Service) (2.12) version 3.5.23 and earlier, GMO-PG Payment Module (PG Multi-Payment Service) (2.11) version 2.3.17 and earlier allows an attacker with administrative rights to execute arbitrary PHP code on the server via unspecified vectors.
Published: 2018-09-07T14:00:00.000Z
Updated: 2024-08-05T03:35:49.000Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-0657 vulnerable 2026-06-08 05:10:24.347453 Details available
Cross-site scripting vulnerability in EC-CUBE Payment Module and GMO-PG Payment Module (PG Multi-Payment Service) for EC-CUBE (EC-CUBE Payment Module (2.12) version 3.5.23 and earlier, EC-CUBE Payment Module (2.11) version 2.3.17 and earlier, GMO-PG Payment Module (PG Multi-Payment Service) (2.12) version 3.5.23 and earlier, and GMO-PG Payment Module (PG Multi-Payment Service) (2.11) version 2.3.17 and earlier) allow an attacker with administrator rights to inject arbitrary web script or HTML via unspecified vectors.
Published: 2018-09-07T14:00:00.000Z
Updated: 2024-08-05T03:35:48.682Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.