5

CVE-2013-5994

Exploit
data/class/pages/mypage/LC_Page_Mypage_DeliveryAddr.php in LOCKON EC-CUBE 2.11.2 through 2.13.0 allows remote attackers to obtain sensitive information via a direct request, which reveals the full path in an error message.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Lockon ≫ Ec-cube Version2.11.2
Lockon ≫ Ec-cube Version2.11.3
Lockon ≫ Ec-cube Version2.11.4
Lockon ≫ Ec-cube Version2.11.5
Lockon ≫ Ec-cube Version2.12.0
Lockon ≫ Ec-cube Version2.12.1
Lockon ≫ Ec-cube Version2.12.2
Lockon ≫ Ec-cube Version2.12.3
Lockon ≫ Ec-cube Version2.12.3en
Lockon ≫ Ec-cube Version2.12.3enp1
Lockon ≫ Ec-cube Version2.12.3enp2
Lockon ≫ Ec-cube Version2.12.4en
Lockon ≫ Ec-cube Version2.12.5
Lockon ≫ Ec-cube Version2.12.5en
Lockon ≫ Ec-cube Version2.12.6
Lockon ≫ Ec-cube Version2.12.6en
Lockon ≫ Ec-cube Version2.13.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.32% 0.519
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.