Approved changes feed: RSS · Atom

cpe:2.3:a:ec-cube:ec-cube:1.3.4:unknown:community_edition:*:*:*:*:*

part: a version: 1.3.4 update: unknown

VendorEc Cube (5677c0e6-0154-50a5-b443-40e157e92c1a)
ProductEc Cube (9b322bbb-ef9e-5ff2-8b04-e200594426c4)
Editioncommunity_edition
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/ec-cube/ec-cube purl2cpe 2026-06-01 10:15:46.262230

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-4991 vulnerable 2026-06-03 14:29:06.695033 Details available
SQL injection vulnerability in LOCKON CO.,LTD. EC-CUBE 2.3.0 and earlier, 1.4.7 and earlier, and 1.5.0-beta2 and earlier; and Community Edition 1.3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the parameter.
Published: 2008-11-06T19:00:00.000Z
Updated: 2024-08-07T10:31:28.424Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.