CVE-2013-4702: Path Traversal
Multiple directory traversal vulnerabilities in the doApiAction function in data/class/api/SCApiOperation.php in LOCKON EC-CUBE 2.12.0 through 2.12.5 on Windows allow remote attackers to read arbitrary files via vectors involving a (1) Operation, (2) Service, (3) Style, (4) Validate, or (5) Version value.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4702?
The severity of CVE-2013-4702 is rated as a high risk due to its potential for unauthorized file access.
How do I fix CVE-2013-4702?
To fix CVE-2013-4702, it is recommended to upgrade LOCKON EC-CUBE to version 2.12.6 or later.
What are the affected versions of LOCKON EC-CUBE for CVE-2013-4702?
The affected versions of LOCKON EC-CUBE for CVE-2013-4702 are 2.12.0 through 2.12.5.
What type of vulnerability is CVE-2013-4702?
CVE-2013-4702 is a directory traversal vulnerability that allows attackers to read arbitrary files.
What components are involved in CVE-2013-4702?
CVE-2013-4702 involves multiple vectors including Operation, Service, Style, Validate, or Version in the doApiAction function.