Unscored CVE-2016-1154 EUVD-2016-2258GHSA-8rp9-2pj2-rv3j

SQL injection vulnerability in the Help plug-in 1.3.5 and earlier in Cuore EC-CUBE allows remote attackers to execute arbitrary SQL command…

Published Feb 19, 2016 · Updated Aug 5, 2024 · Assigned by jpcert

Description

SQL injection vulnerability in the Help plug-in 1.3.5 and earlier in Cuore EC-CUBE allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

References

JVN#31524757 third-party-advisory
http://www.ec-cube.net/products/detail.php?product_id=279
JVNDB-2016-000027 third-party-advisory