Vulnerability Details CVE-2008-4534
SQL injection vulnerability in EC-CUBE Ver2 2.1.2a and earlier, and Ver2 RC 2.3.0-rc1 and earlier, allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 71.0%
CVSS Severity
CVSS v2 Score 7.5
References
- http://jvn.jp/en/jp/JVN81111541/index.html
- http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000065.html
- http://secunia.com/advisories/32065
- http://www.ec-cube.net/info/080829
- http://www.securityfocus.com/bid/31509
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45593
- http://jvn.jp/en/jp/JVN81111541/index.html
- http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000065.html
- http://secunia.com/advisories/32065
- http://www.ec-cube.net/info/080829
- http://www.securityfocus.com/bid/31509
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45593
Products affected by CVE-2008-4534
-
cpe:2.3:a:ec-cube:ec-cube:1.0
-
cpe:2.3:a:ec-cube:ec-cube:1.1.1
-
cpe:2.3:a:ec-cube:ec-cube:1.2.0
-
cpe:2.3:a:ec-cube:ec-cube:1.3.0
-
cpe:2.3:a:ec-cube:ec-cube:1.3.1
-
cpe:2.3:a:ec-cube:ec-cube:1.3.2
-
cpe:2.3:a:ec-cube:ec-cube:1.3.3
-
cpe:2.3:a:ec-cube:ec-cube:1.3.4
-
cpe:2.3:a:ec-cube:ec-cube:1.4.1
-
cpe:2.3:a:ec-cube:ec-cube:1.4.2
-
cpe:2.3:a:ec-cube:ec-cube:1.4.3
-
cpe:2.3:a:ec-cube:ec-cube:1.4.4
-
cpe:2.3:a:ec-cube:ec-cube:1.4.6
-
cpe:2.3:a:ec-cube:ec-cube:1.4.7
-
cpe:2.3:a:ec-cube:ec-cube:1.5.0
-
cpe:2.3:a:ec-cube:ec-cube:2.0.0
-
cpe:2.3:a:ec-cube:ec-cube:2.0.1
-
cpe:2.3:a:ec-cube:ec-cube:2.1.0
-
cpe:2.3:a:ec-cube:ec-cube:2.1.2
-
cpe:2.3:a:ec-cube:ec-cube:2.2.0
-
cpe:2.3:a:ec-cube:ec-cube:2.3.0