Ec Cube Ver2
Approved changes feed: RSS · Atom
cpe:2.3:a:ec-cube:ec-cube_ver2:r18068:-:community:*:*:*:*:*
part: a version: r18068 update: -
| Vendor | Ec Cube (5677c0e6-0154-50a5-b443-40e157e92c1a) |
|---|---|
| Product | Ec Cube Ver2 (bddf6476-deec-507e-ab17-8f103f8ead58) |
| Edition | community |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/ec-cube/ec-cube2 |
purl2cpe | 2026-06-01 10:15:46.298803 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2009-4236 |
vulnerable | 2026-06-03 14:29:56.912476 |
Details available
The process function in data/class/pages/admin/customer/LC_Page_Admin_Customer_SearchCustomer.php in EC-CUBE Ver2 2.4.0 RC1 through 2.4.1, and Community Edition r18068 through r18428, allows remote attackers to obtain sensitive information (customer data) via unknown vectors related to sessions.
Published: 2009-12-08T23:00:00.000Z
Updated: 2024-08-07T06:54:10.201Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.