Skip to content
OpenAdvisories

Package · Packagist

ec-cube/ec-cube

15 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2020-5680

    EC-CUBE Improper input validation vulnerability

    Improper input validation vulnerability in EC-CUBE versions from 3.0.5 to 3.0.18 allows a remote attacker to cause a denial-of-service (DoS) condition via unspecified vector.

    EC-CUBE EC-CUBE ec-cube/ec-cube Packagist
  • High 8.1
    CVE-2020-5590

    EC-CUBE Directory traversal vulnerability

    Directory traversal vulnerability in EC-CUBE 3.0.0 to 3.0.18 and 4.0.0 to 4.0.3 allows remote authenticated attackers to delete arbitrary files and/or directories on the server via unspecified vectors.

    EC-CUBE EC-CUBE ec-cube/ec-cube Packagist