PT-2016-6175 · Ec Cube · Ec-Cube Seed Coupon Plugin

Gen Sato · Publicado 2016-08-01 · Atualizado 2020-08-27 · CVE-2016-4837

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions EC-CUBE Seed Coupon plugin versions prior to 1.6

Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands.

Recommendations For versions prior to 1.6, update to version 1.6 or later to resolve the issue.

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2016-4837

Produtos afetados

Ec-Cube Seed Coupon Plugin

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2016-4837 · Nota de Segurança
• http://ec-cube.net/products/detail.php?product_id=493 · Nota
• http://securityfocus.com/bid/92090 · Nota
• http://jvndb.jvn.jp/jvndb/JVNDB-2016-000130 · Nota
• http://jvn.jp/en/jp/JVN40696431/index.html · Nota
• https://osv.dev/vulnerability/CVE-2016-4837 · Aviso do Fabricante