CVE-2011-3988

SQL injection vulnerability in data/class/SC_Query.php in EC-CUBE 2.11.0 through 2.11.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:lockon:ec-cube:2.11.0:*:*:*:*:*:*:*
cpe:2.3:a:lockon:ec-cube:2.11.1:*:*:*:*:*:*:*
cpe:2.3:a:lockon:ec-cube:2.11.2:*:*:*:*:*:*:*

Information

Published : 2011-10-21 11:55

Updated : 2017-08-28 18:30


NVD link : CVE-2011-3988

Mitre link : CVE-2011-3988


JSON object : View

CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Advertisement

dedicated server usa

Products Affected

lockon

  • ec-cube