Ec Cube Payment Module And Gmo Pg Payment Module (Pg Multi Payment Service) For Ec Cube
Approved changes feed: RSS · Atom
cpe:2.3:a:gmo_payment_gateway,_inc.:ec-cube_payment_module_and_gmo-pg_payment_module_(pg_multi-payment_service)_for_ec-cube:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Gmo Payment Gateway, Inc. (a2c2f17a-b30c-5451-9c89-7e917577f060) |
|---|---|
| Product | Ec Cube Payment Module And Gmo Pg Payment Module (Pg Multi Payment Service) For Ec Cube (0da26c07-b2db-555e-ae48-6174b315a8b5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-0658 |
vulnerable | 2026-06-08 05:10:24.349975 |
Details available
Input validation issue in EC-CUBE Payment Module (2.12) version 3.5.23 and earlier, EC-CUBE Payment Module (2.11) version 2.3.17 and earlier, GMO-PG Payment Module (PG Multi-Payment Service) (2.12) version 3.5.23 and earlier, GMO-PG Payment Module (PG Multi-Payment Service) (2.11) version 2.3.17 and earlier allows an attacker with administrative rights to execute arbitrary PHP code on the server via unspecified vectors.
Published: 2018-09-07T14:00:00.000Z
Updated: 2024-08-05T03:35:49.000Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-0657 |
vulnerable | 2026-06-08 05:10:24.345814 |
Details available
Cross-site scripting vulnerability in EC-CUBE Payment Module and GMO-PG Payment Module (PG Multi-Payment Service) for EC-CUBE (EC-CUBE Payment Module (2.12) version 3.5.23 and earlier, EC-CUBE Payment Module (2.11) version 2.3.17 and earlier, GMO-PG Payment Module (PG Multi-Payment Service) (2.12) version 3.5.23 and earlier, and GMO-PG Payment Module (PG Multi-Payment Service) (2.11) version 2.3.17 and earlier) allow an attacker with administrator rights to inject arbitrary web script or HTML via unspecified vectors.
Published: 2018-09-07T14:00:00.000Z
Updated: 2024-08-05T03:35:48.682Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.