CVE-2013-2314: XSS
Cross-site scripting (XSS) vulnerability in the adminAuthorization function in data/class/helper/SCHelperSession.php in LOCKON EC-CUBE 2.11.0 through 2.12.3enP2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL associated with the management screen.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-2314?
CVE-2013-2314 has a medium severity rating due to its potential for cross-site scripting (XSS) attacks.
How do I fix CVE-2013-2314?
To fix CVE-2013-2314, upgrade your LOCKON EC-CUBE installation to the latest version that addresses this vulnerability.
Which versions of LOCKON EC-CUBE are affected by CVE-2013-2314?
CVE-2013-2314 affects LOCKON EC-CUBE versions from 2.11.0 to 2.12.3 including 2.12.3en and 2.12.3enp2.
Can CVE-2013-2314 lead to data theft?
Yes, CVE-2013-2314 can potentially lead to data theft through XSS if an attacker successfully exploits the vulnerability.
Is CVE-2013-2314 easy to exploit?
CVE-2013-2314 is relatively easy to exploit as it involves injecting malicious scripts via crafted URLs.