GCVE - cpe:2.3:a:ec-cube:ec-cube:1.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ec-cube:ec-cube:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

Vendor	Ec Cube (`5677c0e6-0154-50a5-b443-40e157e92c1a`)
Product	Ec Cube (`9b322bbb-ef9e-5ff2-8b04-e200594426c4`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/ec-cube/ec-cube`	purl2cpe	2026-06-01 10:15:46.259733

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-4537`	vulnerable	2026-06-03 14:28:58.456299	Details available Cross-site scripting (XSS) vulnerability in EC-CUBE Ver1 1.4.6 and earlier, Ver1 Beta 1.5.0-beta and earlier, Ver2 2.1.2a and earlier, Ver2 Beta(RC) 2.1.1-beta and earlier, Community Edition 1.3.4 and earlier, and Community Edition Nightly-Build r17336 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-4535 and CVE-2008-4536. Published: 2008-10-10T18:00:00.000Z Updated: 2024-08-07T10:17:09.940Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/31509 https://exchange.xforce.ibmcloud.com/vulnerabilities/45851 http://jvn.jp/en/jp/JVN26621646/index.html http://www.ec-cube.net/release/detail.php?release_id=193 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000062.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-4536`	vulnerable	2026-06-03 14:28:58.455803	Details available Cross-site scripting (XSS) vulnerability in EC-CUBE Ver1 1.4.6 and earlier, Ver1 Beta 1.5.0-beta and earlier, Ver2 2.1.2a and earlier, Ver2 Beta(RC) 2.2.0-beta and earlier, Community Edition 1.3.4 and earlier, and Community Edition Nightly-Build r17319 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-4535 and CVE-2008-4537. Published: 2008-10-10T18:00:00.000Z Updated: 2024-08-07T10:17:10.119Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/31509 https://exchange.xforce.ibmcloud.com/vulnerabilities/45850 http://jvn.jp/en/jp/JVN36085487/index.html http://www.ec-cube.net/release/detail.php?release_id=193 http://secunia.com/advisories/32065	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-4535`	vulnerable	2026-06-03 14:28:58.454002	Details available Cross-site scripting (XSS) vulnerability in EC-CUBE Ver2 2.1.2a and earlier, EC-CUBE Ver2 Beta(RC) 2.2.0-beta and earlier, and EC-CUBE Community Edition Nighly-Build r17623 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-4536 and CVE-2008-4537. Published: 2008-10-10T18:00:00.000Z Updated: 2024-08-07T10:17:09.809Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/31509 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000064.html http://jvn.jp/en/jp/JVN99916563/index.html https://exchange.xforce.ibmcloud.com/vulnerabilities/45591 http://www.ec-cube.net/release/detail.php?release_id=193	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-4534`	vulnerable	2026-06-03 14:28:58.452233	Details available SQL injection vulnerability in EC-CUBE Ver2 2.1.2a and earlier, and Ver2 RC 2.3.0-rc1 and earlier, allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Published: 2008-10-10T18:00:00.000Z Updated: 2024-08-07T10:17:09.845Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/31509 http://jvn.jp/en/jp/JVN81111541/index.html https://exchange.xforce.ibmcloud.com/vulnerabilities/45593 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000065.html http://secunia.com/advisories/32065	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-6108`	vulnerable	2026-06-03 14:27:47.579189	Details available Cross-site scripting (XSS) vulnerability in EC-CUBE before 1.0.1a-beta allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors. Published: 2006-11-26T22:00:00.000Z Updated: 2024-08-07T20:12:31.987Z Open on db.gcve.eu Reference links http://secunia.com/advisories/22925 http://securitytracker.com/id?1017277 https://exchange.xforce.ibmcloud.com/vulnerabilities/30526 http://jvn.jp/jp/JVN%2361543834/index.html http://www.securityfocus.com/bid/21146/info	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.