high7.5
CVE-2008-4534
SQL injection vulnerability in EC-CUBE Ver2 2.1.2a and earlier, and Ver2 RC 2.3.0-rc1 and earlier, allows remote attackers to execute arbitrary SQL commands vi…
Impact
SQL injection vulnerability in EC-CUBE Ver2 2.1.2a and earlier, and Ver2 RC 2.3.0-rc1 and earlier, allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ec-Cube | Ec-Cube | through 2.1.2a through 2.3.0 Versions 1.0, 1.4.7, 1.5.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://jvn.jp/en/jp/JVN81111541/index.html
- http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000065.html
- http://secunia.com/advisories/32065
- http://www.ec-cube.net/info/080829
- http://www.securityfocus.com/bid/31509
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45593
- http://jvn.jp/en/jp/JVN81111541/index.html
- http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000065.html
- http://secunia.com/advisories/32065
- http://www.ec-cube.net/info/080829
- http://www.securityfocus.com/bid/31509
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45593