Description
The management screen in LOCKON EC-CUBE 3.0.7 through 3.0.9 allows remote authenticated users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2016-1199.
References
- 90503 vdb-entry
- JVN#11458774 third-party-advisory
- JVNDB-2016-000052 third-party-advisory
- https://www.ec-cube.net/info/weakness/201604/
- http://www.ec-cube.net/info/weakness/weakness.php?id=66