Skip to content
OpenAdvisories

Vendor

EC-CUBE

27 known vulnerabilities.

Products

EC-CUBE 8 EC-CUBE 4 series 5 EC-CUBE 2 series 3 EC-CUBE 3 series and EC-CUBE 4 series 2 EC-CUBE 4 series, EC-CUBE 3 series, and EC-CUBE 2 series 1 EC-CUBE plugin 'Mail Magazine Management Plugin' 1 AmazonPay V2 Plugin (4.0/4.1 series) 1 AmazonPay V2 Plugin (4.2/4.3 series, Bundle Edition) 1 AmazonPay V2 Plugin (4.2/4.3 series) 1 AmazonPay Plugin (4.0 series) 1 EC-CUBE 4.1 series 1 EC-CUBE 4.2 series 1 EC-CUBE 4.3 series 1 EC-CUBE Business form output plugin (for EC-CUBE 3.0 series) 1 EC-CUBE Web API Plugin 1 EC-CUBE Web API Plugin (4.2 series) 1 Product Image Bulk Upload Plugin 1 EC-CUBE Category contents plugin (for EC-CUBE 3.0 series) 1 EC-CUBE Email newsletters management plugin (for EC-CUBE 3.0 series) 1 EC-CUBE 3 series 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.7
    CVE-2022-40199

    EC-CUBE Directory traversal vulnerability

    Directory traversal vulnerability in EC-CUBE 3 series (EC-CUBE 3.0.0 to 3.0.18-p4 ) and EC-CUBE 4 series (EC-CUBE 4.0.0 to 4.1.2) allows a remote authenticated attacker with an administrative privilege to obtain the product's directory structure information.

    EC-CUBE EC-CUBE 3 series and EC-CUBE 4 series ec-cube/ec-cube Packagist