Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2015-5665

Cross-site request forgery (CSRF) vulnerability in LOCKON EC-CUBE 2.11.0 through 2.13.3 allows remote attackers to hijack the authentication of arbitrary users for requests that write to PHP scripts, related to the doValidToken function.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 35.9%
CVSS Severity
CVSS v2 Score 5.1
Products affected by CVE-2015-5665
  • Lockon » Ec-Cube » Version: 2.11.0
    cpe:2.3:a:lockon:ec-cube:2.11.0
  • Lockon » Ec-Cube » Version: 2.11.1
    cpe:2.3:a:lockon:ec-cube:2.11.1
  • Lockon » Ec-Cube » Version: 2.11.2
    cpe:2.3:a:lockon:ec-cube:2.11.2
  • Lockon » Ec-Cube » Version: 2.11.3
    cpe:2.3:a:lockon:ec-cube:2.11.3
  • Lockon » Ec-Cube » Version: 2.11.4
    cpe:2.3:a:lockon:ec-cube:2.11.4
  • Lockon » Ec-Cube » Version: 2.11.5
    cpe:2.3:a:lockon:ec-cube:2.11.5
  • Lockon » Ec-Cube » Version: 2.12.0
    cpe:2.3:a:lockon:ec-cube:2.12.0
  • Lockon » Ec-Cube » Version: 2.12.1
    cpe:2.3:a:lockon:ec-cube:2.12.1
  • Lockon » Ec-Cube » Version: 2.12.2
    cpe:2.3:a:lockon:ec-cube:2.12.2
  • Lockon » Ec-Cube » Version: 2.12.3
    cpe:2.3:a:lockon:ec-cube:2.12.3
  • Lockon » Ec-Cube » Version: 2.12.5
    cpe:2.3:a:lockon:ec-cube:2.12.5
  • Lockon » Ec-Cube » Version: 2.12.6
    cpe:2.3:a:lockon:ec-cube:2.12.6
  • Lockon » Ec-Cube » Version: 2.13.0
    cpe:2.3:a:lockon:ec-cube:2.13.0
  • Lockon » Ec-Cube » Version: 2.13.1
    cpe:2.3:a:lockon:ec-cube:2.13.1
  • Lockon » Ec-Cube » Version: 2.13.2
    cpe:2.3:a:lockon:ec-cube:2.13.2


Products
Pricing
Contact Us

Shodan ® - All rights reserved