Skip to content
OpenAdvisories
Unscored CVE-2013-3654 EUVD-2013-3587GHSA-g4rq-mc9f-8hv5

Directory traversal vulnerability in LOCKON EC-CUBE 2.12.0 through 2.12.4 allows remote attackers to read arbitrary image files via vectors…

Published Jun 29, 2013 · Updated Sep 17, 2024 · Assigned by jpcert

Description

Directory traversal vulnerability in LOCKON EC-CUBE 2.12.0 through 2.12.4 allows remote attackers to read arbitrary image files via vectors related to data/class/SC_CheckError.php and data/class/SC_FormParam.php, a different vulnerability than CVE-2013-3650.

References