« Volver al listado

CVE-2013-5995

Estado: ModificadaMedia (5.5)—

data/class/helper/SC_Helper_Address.php in the front-features implementation in LOCKON EC-CUBE 2.12.3 through 2.13.0 allows remote authenticated users to obtain sensitive information via unspecified vectors related to addresses.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Lockon — Ec-cube

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-5995",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:N",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 4.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "vultures@jpcert.or.jp",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-11-21T04:40:59.047",
  "references": [
    {
      "url": "http://jvn.jp/en/jp/JVN55630933/index.html",
      "source": "vultures@jpcert.or.jp"
    },
    {
      "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2013-000106",
      "source": "vultures@jpcert.or.jp"
    },
    {
      "url": "http://svn.ec-cube.net/open_trac/changeset/23274",
      "tags": [
        "Exploit",
        "Patch"
      ],
      "source": "vultures@jpcert.or.jp"
    },
    {
      "url": "http://www.ec-cube.net/info/weakness/weakness.php?id=51",
      "tags": [
        "Exploit",
        "Patch"
      ],
      "source": "vultures@jpcert.or.jp"
    },
    {
      "url": "http://jvn.jp/en/jp/JVN55630933/index.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2013-000106",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://svn.ec-cube.net/open_trac/changeset/23274",
      "tags": [
        "Exploit",
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.ec-cube.net/info/weakness/weakness.php?id=51",
      "tags": [
        "Exploit",
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "data/class/helper/SC_Helper_Address.php in the front-features implementation in LOCKON EC-CUBE 2.12.3 through 2.13.0 allows remote authenticated users to obtain sensitive information via unspecified vectors related to addresses."
    },
    {
      "lang": "es",
      "value": "data/class/helper/SC_Helper_Address.php en la implementación front-features de LOCKON EC-CUBE 2.12.3 permite a usuarios remotos autenticados obtener información sensible a través de vectores sin especificar relacionados con las direcciones."
    }
  ],
  "lastModified": "2026-06-16T23:59:51.633",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:lockon:ec-cube:2.12.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6E3D5763-00DB-4F7E-AA08-1A2AA3070B5D"
            },
            {
              "criteria": "cpe:2.3:a:lockon:ec-cube:2.12.3en:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "95D2187D-3860-4432-9646-8F0DE41F3168"
            },
            {
              "criteria": "cpe:2.3:a:lockon:ec-cube:2.12.3enp1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8FF41053-E778-4000-9BE5-3F538A78AA41"
            },
            {
              "criteria": "cpe:2.3:a:lockon:ec-cube:2.12.3enp2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3E213BA2-5D21-4A58-8E32-1168A9108C94"
            },
            {
              "criteria": "cpe:2.3:a:lockon:ec-cube:2.12.4en:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C84115A8-8F65-4E6D-B77E-C14F83E5FB7F"
            },
            {
              "criteria": "cpe:2.3:a:lockon:ec-cube:2.12.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "930A679D-FC06-439E-B028-1F8658FC0B73"
            },
            {
              "criteria": "cpe:2.3:a:lockon:ec-cube:2.12.5en:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AE0D2972-74A9-45FE-BE17-DEDD24A8B704"
            },
            {
              "criteria": "cpe:2.3:a:lockon:ec-cube:2.12.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8417F3B8-1A43-40DE-A429-FB29FD543FB3"
            },
            {
              "criteria": "cpe:2.3:a:lockon:ec-cube:2.12.6en:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CD60B565-5AEA-4CFA-807D-7BE1BF2CAB9D"
            },
            {
              "criteria": "cpe:2.3:a:lockon:ec-cube:2.13.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C0D9BFC7-D797-4461-870E-CF67DD28629E"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "evaluatorComment": "Per: http://jvndb.jvn.jp/en/contents/2013/JVNDB-2013-000106.html\n\n\"User's information may be obtained or altered by other user who visits the shopping site\"",
  "sourceIdentifier": "vultures@jpcert.or.jp"
}