Approved changes feed: RSS · Atom

cpe:2.3:a:ec-cube:ec-cube:2.12:*:*:*:*:*:*:*

part: a version: 2.12 update: *

VendorEc Cube (5677c0e6-0154-50a5-b443-40e157e92c1a)
ProductEc Cube (9b322bbb-ef9e-5ff2-8b04-e200594426c4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/ec-cube/ec-cube purl2cpe 2026-06-01 10:15:46.271383

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-0658 not_vulnerable 2026-06-03 14:37:51.341886 Details available
Input validation issue in EC-CUBE Payment Module (2.12) version 3.5.23 and earlier, EC-CUBE Payment Module (2.11) version 2.3.17 and earlier, GMO-PG Payment Module (PG Multi-Payment Service) (2.12) version 3.5.23 and earlier, GMO-PG Payment Module (PG Multi-Payment Service) (2.11) version 2.3.17 and earlier allows an attacker with administrative rights to execute arbitrary PHP code on the server via unspecified vectors.
Published: 2018-09-07T14:00:00.000Z
Updated: 2024-08-05T03:35:49.000Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-0657 not_vulnerable 2026-06-03 14:37:51.341376 Details available
Cross-site scripting vulnerability in EC-CUBE Payment Module and GMO-PG Payment Module (PG Multi-Payment Service) for EC-CUBE (EC-CUBE Payment Module (2.12) version 3.5.23 and earlier, EC-CUBE Payment Module (2.11) version 2.3.17 and earlier, GMO-PG Payment Module (PG Multi-Payment Service) (2.12) version 3.5.23 and earlier, and GMO-PG Payment Module (PG Multi-Payment Service) (2.11) version 2.3.17 and earlier) allow an attacker with administrator rights to inject arbitrary web script or HTML via unspecified vectors.
Published: 2018-09-07T14:00:00.000Z
Updated: 2024-08-05T03:35:48.682Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.