Ec Cube Help Plugin

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2016-1154 CRITICAL Act Now

SQL injection vulnerability in the Help plug-in 1.3.5 and earlier in Cuore EC-CUBE allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

SQLi Ec Cube Help Plugin

NVD

CVSS 3.0

9.1

EPSS

0.9%

CVE-2016-1154

EPSS 1% CVSS 9.1

CRITICAL Act Now

SQL injection vulnerability in the Help plug-in 1.3.5 and earlier in Cuore EC-CUBE allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

SQLi Ec Cube Help Plugin

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy