NetSight
IP …
critical9.1

CVE-2016-1154

SQL injection vulnerability in the Help plug-in 1.3.5 and earlier in Cuore EC-CUBE allows remote attackers to execute arbitrary SQL commands via unspecified ve…

Impact

SQL injection vulnerability in the Help plug-in 1.3.5 and earlier in Cuore EC-CUBE allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Affected products

VendorProductAffected versions
CuoreEc-Cube Help Plugin
through 1.3.5

Weakness classification

CWE-89

References