Vulnerabilities (CVE)

Filtered by vendor Ec-cube Subscribe
Filtered by product Ec-cube Payment Module
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-0658 2 Ec-cube, Gmo-pg 3 Ec-cube, Ec-cube Payment Module, Gmo-pg Payment Module 2018-11-20 6.5 MEDIUM 7.2 HIGH
Input validation issue in EC-CUBE Payment Module (2.12) version 3.5.23 and earlier, EC-CUBE Payment Module (2.11) version 2.3.17 and earlier, GMO-PG Payment Module (PG Multi-Payment Service) (2.12) version 3.5.23 and earlier, GMO-PG Payment Module (PG Multi-Payment Service) (2.11) version 2.3.17 and earlier allows an attacker with administrative rights to execute arbitrary PHP code on the server via unspecified vectors.