CVE-2013-5994: Infoleak
data/class/pages/mypage/LCPageMypageDeliveryAddr.php in LOCKON EC-CUBE 2.11.2 through 2.13.0 allows remote attackers to obtain sensitive information via a direct request, which reveals the full path in an error message.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-5994?
CVE-2013-5994 is classified as a medium severity vulnerability due to its potential to expose sensitive information.
How do I fix CVE-2013-5994?
To fix CVE-2013-5994, upgrade your LOCKON EC-CUBE to the latest version, specifically beyond 2.13.0.
What type of vulnerability is CVE-2013-5994?
CVE-2013-5994 is an information disclosure vulnerability that allows attackers to access sensitive information through direct requests.
Which versions of LOCKON EC-CUBE are affected by CVE-2013-5994?
CVE-2013-5994 affects LOCKON EC-CUBE versions 2.11.2 through 2.13.0.
What happens if I am affected by CVE-2013-5994?
If affected by CVE-2013-5994, your application may reveal sensitive data, including file paths, in error messages.