https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 22 Oct 2026 12:53:46 +0000 https://cve.radiocsirt.org/vuln/cnvd-2019-21135 cnvd-2019-21135 https://cve.radiocsirt.org/vuln/cnvd-2019-21135 https://cve.radiocsirt.org/vuln/euvd-2026-60901 EUVD-2026-60901 https://cve.radiocsirt.org/vuln/euvd-2026-60901 https://cve.radiocsirt.org/vuln/fkie_cve-2018-0658 <p>Input validation issue in EC-CUBE Payment Module (2.12) version 3.5.23 and earlier, EC-CUBE Payment Module (2.11) version 2.3.17 and earlier, GMO-PG Payment Module (PG Multi-Payment Service) (2.12) version 3.5.23 and earlier, GMO-PG Payment Module (PG Multi-Payment Service) (2.11) version 2.3.17 and earlier allows an attacker with administrative rights to execute arbitrary PHP code on the server via unspecified vectors.</p> <p>Input validation issue in EC-CUBE Payment Module (2.12) version 3.5.23 and earlier, EC-CUBE Payment Module (2.11) version 2.3.17 and earlier, GMO-PG Payment Module (PG Multi-Payment Service) (2.12) version 3.5.23 and earlier, GMO-PG Payment Module (PG Multi-Payment Service) (2.11) version 2.3.17 and earlier allows an attacker with administrative rights to execute arbitrary PHP code on the server via unspecified vectors.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-0658 https://cve.radiocsirt.org/vuln/ghsa-rjmh-9927-cj3q <p>Input validation issue in EC-CUBE Payment Module (2.12) version 3.5.23 and earlier, EC-CUBE Payment Module (2.11) version 2.3.17 and earlier, GMO-PG Payment Module (PG Multi-Payment Service) (2.12) version 3.5.23 and earlier, GMO-PG Payment Module (PG Multi-Payment Service) (2.11) version 2.3.17 and earlier allows an attacker with administrative rights to execute arbitrary PHP code on the server via unspecified vectors.</p> <p>Input validation issue in EC-CUBE Payment Module (2.12) version 3.5.23 and earlier, EC-CUBE Payment Module (2.11) version 2.3.17 and earlier, GMO-PG Payment Module (PG Multi-Payment Service) (2.12) version 3.5.23 and earlier, GMO-PG Payment Module (PG Multi-Payment Service) (2.11) version 2.3.17 and earlier allows an attacker with administrative rights to execute arbitrary PHP code on the server via unspecified vectors.</p> https://cve.radiocsirt.org/vuln/ghsa-rjmh-9927-cj3q https://cve.radiocsirt.org/vuln/gsd-2018-0658 gsd-2018-0658 https://cve.radiocsirt.org/vuln/gsd-2018-0658 https://cve.radiocsirt.org/vuln/jvndb-2018-000086 <p>EC-CUBE Payment Module and GMO-PG Payment Module (PG Multi-Payment Service), which are additional modules for EC-CUBE, provided by GMO Payment Gateway, Inc. contain multiple vulnerabilities listed below. * Cross-site scripting vulnerability in the management screen (CWE-79) - CVE-2018-0657 * Input validation bypass vulnerability in the management screen (CWE-20) - CVE-2018-0658 Gen Sato of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>EC-CUBE Payment Module and GMO-PG Payment Module (PG Multi-Payment Service), which are additional modules for EC-CUBE, provided by GMO Payment Gateway, Inc. contain multiple vulnerabilities listed below. * Cross-site scripting vulnerability in the management screen (CWE-79) - CVE-2018-0657 * Input validation bypass vulnerability in the management screen (CWE-20) - CVE-2018-0658 Gen Sato of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2018-000086