Security Advisory

CVE-2018-0658

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-09-07 14:00:00

Last updated 2024-08-05 03:35:49

Assigner jpcert

CVSS score not scored

State PUBLISHED

Description

Input validation issue in EC-CUBE Payment Module (2.12) version 3.5.23 and earlier, EC-CUBE Payment Module (2.11) version 2.3.17 and earlier, GMO-PG Payment Module (PG Multi-Payment Service) (2.12) version 3.5.23 and earlier, GMO-PG Payment Module (PG Multi-Payment Service) (2.11) version 2.3.17 and earlier allows an attacker with administrative rights to execute arbitrary PHP code on the server via unspecified vectors.

← Browse all CVEs View on cve.org ↗