Unscored CVE-2015-7784 EUVD-2015-7683GHSA-pqr5-2p2j-frrf

SQL injection vulnerability in the BOKUBLOCK (1) BbAdminViewsControl213 plugin before 1.1 and (2) BbAdminViewsControl plugin before 2.1 for…

Published Dec 30, 2015 · Updated Aug 6, 2024 · Assigned by jpcert

Description

SQL injection vulnerability in the BOKUBLOCK (1) BbAdminViewsControl213 plugin before 1.1 and (2) BbAdminViewsControl plugin before 2.1 for EC-CUBE allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

References

http://www.ec-cube.net/products/detail.php?product_id=288
http://www.ec-cube.net/products/detail.php?product_id=781
JVNDB-2015-000190 third-party-advisory
JVN#55545372 third-party-advisory