Approved changes feed: RSS · Atom

cpe:2.3:a:ec-cube:e-mail_newsletter_management:*:*:*:*:*:ec-cube:*:*

part: a version: * update: *

VendorEc Cube (5677c0e6-0154-50a5-b443-40e157e92c1a)
ProductE Mail Newsletter Management (1d142c95-93a9-5f59-8a8b-9b5852a5c84f)
Edition*
Language*
Software edition*
Target softwareec-cube
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-21179 vulnerable 2026-06-03 14:46:11.394801 Details available
Cross-site request forgery (CSRF) vulnerability in EC-CUBE plugin 'Mail Magazine Management Plugin' ver4.0.0 to 4.1.1 (for EC-CUBE 4 series) and ver1.0.0 to 1.0.4 (for EC-CUBE 3 series) allows a remote unauthenticated attacker to hijack the authentication of an administrator via a specially crafted page, and Mail Magazine Templates and/or transmitted history information may be deleted unintendedly.
Published: 2022-02-24T09:50:27.000Z
Updated: 2024-08-03T02:31:58.816Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.