Read the docs

EC-CUBE CO.,LTD.

Records40All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9

Exploited now

EC-CUBE CO.,LTD. records in CISA KEV

No EC-CUBE CO.,LTD. vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ec-cube 25 records LOW Business Form Output 2 records LOW Ec-cube Payment Module 2 records LOW Amazon Pay 1 record LOW Delivery Slip Number 1 record LOW Delivery Slip Number Csv Bulk Registration 1 record LOW Delivery Slip Number Mail 1 record LOW Discount Coupon 1 record MEDIUM

Records

1 record in Amazon Pay · all components

TI-2019-04293 CVE-2019-6003 · GHSA-gcx8-9848-5xm5

Cross-site scripting in LTD." EC-CUBE plugin 'Amazon Pay Plugin 2.12,2.13'

Priority LOW 29

Cross-site scripting vulnerability in EC-CUBE plugin 'Amazon Pay Plugin 2.12,2.13' version 2.4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01031 Published 2019-09-12 No fix listed CWE-79
Open these records in search →