VIR Vulnerability Intelligence Relay

CVE-2011-0451

medium
Published 2011-02-03 · Modified 2024-01-15
CVSS v3
—
CVSS v2
4.3
VIR risk
4.3

Description

EC-CUBE XSS Vulnerabilities

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: vultures@jpcert.or.jp — http://svn.ec-cube.net/open_trac/changeset/18742

vendor Authored 2026-05-27

Vendor advisory: vultures@jpcert.or.jp — http://secunia.com/advisories/43153

Package impact
EcosystemPackageVulnerableFixed
php Packagistec-cube/ec-cube<2.4.42.4.4

Application impact
VendorProductVersionsFixed
lockonec-cube{"endIncluding":"2.4.3"}
lockonec-cube1.1.0
lockonec-cube1.1.1
lockonec-cube1.2.0
lockonec-cube1.3.0
lockonec-cube1.3.1
lockonec-cube1.3.2
lockonec-cube1.3.3
lockonec-cube1.3.4
lockonec-cube1.4.0
lockonec-cube1.4.1
lockonec-cube1.4.2
lockonec-cube1.4.3
lockonec-cube1.4.5
lockonec-cube1.4.6
lockonec-cube1.4.7
lockonec-cube1.5.0
lockonec-cube2.0.0
lockonec-cube2.0.1
lockonec-cube2.1.0
lockonec-cube2.1.2
lockonec-cube2.2.0
lockonec-cube2.2.1
lockonec-cube2.3.0
lockonec-cube2.3.1
lockonec-cube2.3.3
lockonec-cube2.3.4
lockonec-cube2.4.0
lockonec-cube2.4.1
lockonec-cube2.4.2
lockonec-cube2.4.4
lockonec-cube2.11.0

References

CWEs

CWE-79

Verify integrity in audit chain (admin only). AS-IS.