CVE-2018-16191: Medium severity ec-cube amazon pay vulnerability
Open redirect vulnerability in EC-CUBE (EC-CUBE 3.0.0, EC-CUBE 3.0.1, EC-CUBE 3.0.2, EC-CUBE 3.0.3, EC-CUBE 3.0.4, EC-CUBE 3.0.5, EC-CUBE 3.0.6, EC-CUBE 3.0.7, EC-CUBE 3.0.8, EC-CUBE 3.0.9, EC-CUBE 3.0.10, EC-CUBE 3.0.11, EC-CUBE 3.0.12, EC-CUBE 3.0.12-p1, EC-CUBE 3.0.13, EC-CUBE 3.0.14, EC-CUBE 3.0.15, EC-CUBE 3.0.16) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-16191?
CVE-2018-16191 is an open redirect vulnerability in EC-CUBE.
How does CVE-2018-16191 affect EC-CUBE?
CVE-2018-16191 affects EC-CUBE versions 3.0.0 to 3.0.16.
What is the severity of CVE-2018-16191?
CVE-2018-16191 has a severity of 6.1 (Medium).
How can I fix the open redirect vulnerability in EC-CUBE?
To fix the open redirect vulnerability in EC-CUBE, update to a patched version of EC-CUBE or apply the necessary security patches.
Where can I find more information about CVE-2018-16191?
More information about CVE-2018-16191 can be found at the following sources: [SecurityFocus](http://www.securityfocus.com/bid/106545), [JVN](https://jvn.jp/en/jp/JVN25359688/index.html), [EC-CUBE](https://www.ec-cube.net/info/weakness/20181113/).