Approved changes feed: RSS · Atom

cpe:2.3:a:ec-cube_co.,ltd.:ec-cube_plugin_'mail_magazine_management_plugin':*:*:*:*:*:*:*:*

part: a version: * update: *

VendorEc Cube Co.,Ltd. (8b2f95c1-98af-5eac-94a4-13a78806ff7b)
ProductEc Cube Plugin 'Mail Magazine Management Plugin' (c1b63ae3-b39c-511e-adf2-f07ee53faf36)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-21179 vulnerable 2026-06-03 14:46:11.392894 Details available
Cross-site request forgery (CSRF) vulnerability in EC-CUBE plugin 'Mail Magazine Management Plugin' ver4.0.0 to 4.1.1 (for EC-CUBE 4 series) and ver1.0.0 to 1.0.4 (for EC-CUBE 3 series) allows a remote unauthenticated attacker to hijack the authentication of an administrator via a specially crafted page, and Mail Magazine Templates and/or transmitted history information may be deleted unintendedly.
Published: 2022-02-24T09:50:27.000Z
Updated: 2024-08-03T02:31:58.816Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.