CVE-2011-1325: CSRF
Published May 13, 2011
·Updated
Cross-site request forgery (CSRF) vulnerability in EC-CUBE before 2.11.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
Affected Software
47 affected components
LOCKON EC-CUBE=1.4.3-b-beta
LOCKON EC-CUBE=2.4.0
LOCKON EC-CUBE=2.3.1
LOCKON EC-CUBE=2.11.0
LOCKON EC-CUBE=1.4.0-beta
LOCKON EC-CUBE=2.0.0-beta
LOCKON EC-CUBE=1.4.7
LOCKON EC-CUBE=1.4.6
LOCKON EC-CUBE=2.11.0-beta
LOCKON EC-CUBE=1.4.2-beta
LOCKON EC-CUBE=1.3.4
LOCKON EC-CUBE=1.3.3
LOCKON EC-CUBE=2.3.3
LOCKON EC-CUBE=2.1.0-beta
LOCKON EC-CUBE=1.3.1
LOCKON EC-CUBE=2.4.3
LOCKON EC-CUBE=1.2.0-beta
LOCKON EC-CUBE=1.3.4-community
LOCKON EC-CUBE=2.0.1
LOCKON EC-CUBE=2.4.0-rc1
LOCKON EC-CUBE=1.3.0-beta
LOCKON EC-CUBE=2.4.4
LOCKON EC-CUBE=2.4.2
LOCKON EC-CUBE=1.4.3-beta
LOCKON EC-CUBE=1.3.1-a
LOCKON EC-CUBE=2.2.1-one
LOCKON EC-CUBE=2.3.0-rc1
LOCKON EC-CUBE=2.1.2-a
LOCKON EC-CUBE=2.0.1-a
LOCKON EC-CUBE=1.4.0-a-beta
LOCKON EC-CUBE=1.3.2
LOCKON EC-CUBE=1.1.1
LOCKON EC-CUBE=1.4.4-beta
LOCKON EC-CUBE=1.4.3-a-beta
LOCKON EC-CUBE<=2.11.0
LOCKON EC-CUBE=2.3.4
LOCKON EC-CUBE=2.2.0-beta
LOCKON EC-CUBE=2.1.2
LOCKON EC-CUBE=2.3.0
LOCKON EC-CUBE=2.4.1
LOCKON EC-CUBE=1.5.0-beta
LOCKON EC-CUBE=1.1.0-beta
LOCKON EC-CUBE=1.4.5
LOCKON EC-CUBE=1.4.1-beta
LOCKON EC-CUBE=2.5.0-alpha2
LOCKON EC-CUBE=1.3.0
LOCKON EC-CUBE=2.5.0-alpha
Event History
May 13, 2011
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-1325?
CVE-2011-1325 has been classified as a high severity vulnerability due to its ability to allow remote attackers to hijack user authentication.
2
How do I fix CVE-2011-1325?
To resolve CVE-2011-1325, it is recommended to upgrade EC-CUBE to version 2.11.0 or newer.
3
What type of vulnerability is CVE-2011-1325?
CVE-2011-1325 is a Cross-Site Request Forgery (CSRF) vulnerability.
4
Which versions of EC-CUBE are affected by CVE-2011-1325?
CVE-2011-1325 affects multiple versions of EC-CUBE, specifically versions prior to 2.11.0.
5
What are the potential impacts of CVE-2011-1325?
Exploitation of CVE-2011-1325 can lead to unauthorized actions performed on behalf of authenticated users.