Unscored CVE-2011-1325 EUVD-2011-1333GHSA-3r86-xc8x-m6c4

Cross-site request forgery (CSRF) vulnerability in EC-CUBE before 2.11.0 allows remote attackers to hijack the authentication of unspecifie…

Published May 13, 2011 · Updated Sep 17, 2024 · Assigned by jpcert

Description

Cross-site request forgery (CSRF) vulnerability in EC-CUBE before 2.11.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

References

JVNDB-2011-000029 third-party-advisory
44487 third-party-advisory
JVN#37878530 third-party-advisory
72239 vdb-entry
http://www.ec-cube.net/press/detail.php?press_id=114