Vulnerability Details CVE-2013-5994
data/class/pages/mypage/LC_Page_Mypage_DeliveryAddr.php in LOCKON EC-CUBE 2.11.2 through 2.13.0 allows remote attackers to obtain sensitive information via a direct request, which reveals the full path in an error message.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 54.2%
CVSS Severity
CVSS v2 Score 5.0
Products affected by CVE-2013-5994
-
cpe:2.3:a:lockon:ec-cube:2.11.2
-
cpe:2.3:a:lockon:ec-cube:2.11.3
-
cpe:2.3:a:lockon:ec-cube:2.11.4
-
cpe:2.3:a:lockon:ec-cube:2.11.5
-
cpe:2.3:a:lockon:ec-cube:2.12.0
-
cpe:2.3:a:lockon:ec-cube:2.12.1
-
cpe:2.3:a:lockon:ec-cube:2.12.2
-
cpe:2.3:a:lockon:ec-cube:2.12.3
-
cpe:2.3:a:lockon:ec-cube:2.12.3en
-
cpe:2.3:a:lockon:ec-cube:2.12.3enp1
-
cpe:2.3:a:lockon:ec-cube:2.12.3enp2
-
cpe:2.3:a:lockon:ec-cube:2.12.4en
-
cpe:2.3:a:lockon:ec-cube:2.12.5
-
cpe:2.3:a:lockon:ec-cube:2.12.5en
-
cpe:2.3:a:lockon:ec-cube:2.12.6
-
cpe:2.3:a:lockon:ec-cube:2.12.6en
-
cpe:2.3:a:lockon:ec-cube:2.13.0