Ec Cube Payment Module
Approved changes feed: RSS · Atom
cpe:2.3:a:ec-cube:ec-cube_payment_module:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Ec Cube (5677c0e6-0154-50a5-b443-40e157e92c1a) |
|---|---|
| Product | Ec Cube Payment Module (adea7e99-6763-5221-bbb4-db51406f08b3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/coincheckjp/eccube-module |
purl2cpe | 2026-06-01 10:15:46.301711 |
pkg:github/ec-cube/sample-payment-plugin |
purl2cpe | 2026-06-01 10:15:46.301714 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-0658 |
vulnerable | 2026-06-03 14:37:51.341825 |
Details available
Input validation issue in EC-CUBE Payment Module (2.12) version 3.5.23 and earlier, EC-CUBE Payment Module (2.11) version 2.3.17 and earlier, GMO-PG Payment Module (PG Multi-Payment Service) (2.12) version 3.5.23 and earlier, GMO-PG Payment Module (PG Multi-Payment Service) (2.11) version 2.3.17 and earlier allows an attacker with administrative rights to execute arbitrary PHP code on the server via unspecified vectors.
Published: 2018-09-07T14:00:00.000Z
Updated: 2024-08-05T03:35:49.000Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-0657 |
vulnerable | 2026-06-03 14:37:51.339638 |
Details available
Cross-site scripting vulnerability in EC-CUBE Payment Module and GMO-PG Payment Module (PG Multi-Payment Service) for EC-CUBE (EC-CUBE Payment Module (2.12) version 3.5.23 and earlier, EC-CUBE Payment Module (2.11) version 2.3.17 and earlier, GMO-PG Payment Module (PG Multi-Payment Service) (2.12) version 3.5.23 and earlier, and GMO-PG Payment Module (PG Multi-Payment Service) (2.11) version 2.3.17 and earlier) allow an attacker with administrator rights to inject arbitrary web script or HTML via unspecified vectors.
Published: 2018-09-07T14:00:00.000Z
Updated: 2024-08-05T03:35:48.682Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.