Vulnerabilidades de EC-CUBE CO.,LTD.
CVEs publicadas que afetam produtos de EC-CUBE CO.,LTD.: 2 registro(s), com severidade, exploração e correções.
Ec-cube 1EC-CUBE 4.1 series 1EC-CUBE 4.2 series 1EC-CUBE 4.3 series 1AmazonPay V2 Plugin (4.0/4.1 series) 1AmazonPay V2 Plugin (4.2/4.3 series, Bundle Edition) 1AmazonPay V2 Plugin (4.2/4.3 series) 1AmazonPay Plugin (4.0 series) 1
CVE-2026-103671
Média · 4.7
CWE-472 14/10/2026
External control of assumed-Immutable web parameter issue exists in EC-CUBE plugin (for EC-CUBE 4...
External control of assumed-Immutable web parameter issue exists in EC-CUBE plugin (for EC-CUBE 4 series) "AmazonPay Plugin". If exploited, the user may be redirected to an arbitrary website during the ordering process. As a result, user's account information may be obtained.
CVE-2026-30777
Média · 6.5
CWE-288 05/03/2026
Authentication Bypass Using an Alternate Path or Channel em EC-CUBE CO.,LTD. Ec-cube
EC-CUBE provided by EC-CUBE CO.,LTD. contains a multi-factor authentication (MFA) bypass vulnerability. An attacker who has obtained a valid administrator ID and password may be able to bypass two-factor authentication and gain unauthorized access to the administrative page.