CVE-2015-7784

Опубликовано: 30 дек. 2015

Источник: nvd

CVSS3: 4.3

CVSS2: 4

EPSS Низкий

Описание

SQL injection vulnerability in the BOKUBLOCK (1) BbAdminViewsControl213 plugin before 1.1 and (2) BbAdminViewsControl plugin before 2.1 for EC-CUBE allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

Ссылки

http://jvn.jp/en/jp/JVN55545372/index.html
Vendor Advisory
http://jvndb.jvn.jp/jvndb/JVNDB-2015-000190
Vendor Advisory
http://www.ec-cube.net/products/detail.php?product_id=288
Vendor Advisory
http://www.ec-cube.net/products/detail.php?product_id=781
Vendor Advisory
http://jvn.jp/en/jp/JVN55545372/index.html
Vendor Advisory
http://jvndb.jvn.jp/jvndb/JVNDB-2015-000190
Vendor Advisory
http://www.ec-cube.net/products/detail.php?product_id=288
Vendor Advisory
http://www.ec-cube.net/products/detail.php?product_id=781
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:bokublock:bbadminviewscontrol:*:*:*:*:*:ec-cube:*:*

Версия до 2.0 (включая)

cpe:2.3:a:bokublock:bbadminviewscontrol213:*:*:*:*:*:ec-cube:*:*

Версия до 1.0 (включая)

EPSS

Процентиль: 58%

0.00359

Низкий

4.3 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-pqr5-2p2j-frrf