Filtered by vendor Ec-cube Subscriptions
Filtered by product Ec-cube Payment Module Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2018-0658 2 Ec-cube, Gmo-pg 3 Ec-cube, Ec-cube Payment Module, Gmo-pg Payment Module 2018-11-20 N/A
Input validation issue in EC-CUBE Payment Module (2.12) version 3.5.23 and earlier, EC-CUBE Payment Module (2.11) version 2.3.17 and earlier, GMO-PG Payment Module (PG Multi-Payment Service) (2.12) version 3.5.23 and earlier, GMO-PG Payment Module (PG Multi-Payment Service) (2.11) version 2.3.17 and earlier allows an attacker with administrative rights to execute arbitrary PHP code on the server via unspecified vectors.
CVE-2018-0657 2 Ec-cube, Gmo-pg 3 Ec-cube, Ec-cube Payment Module, Gmo-pg Payment Module 2018-11-20 N/A
Cross-site scripting vulnerability in EC-CUBE Payment Module and GMO-PG Payment Module (PG Multi-Payment Service) for EC-CUBE (EC-CUBE Payment Module (2.12) version 3.5.23 and earlier, EC-CUBE Payment Module (2.11) version 2.3.17 and earlier, GMO-PG Payment Module (PG Multi-Payment Service) (2.12) version 3.5.23 and earlier, and GMO-PG Payment Module (PG Multi-Payment Service) (2.11) version 2.3.17 and earlier) allow an attacker with administrator rights to inject arbitrary web script or HTML via unspecified vectors.