CVE-2013-2312

Published: May 29, 2013Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the shopping-cart screen in LOCKON EC-CUBE 2.11.0 through 2.12.3enP2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

Affected (13)

Products: Lockon: Ec Cube

Lockon

1 product

Ec Cube

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Lockon Ec Cube	Version 2.11.0
Lockon Ec Cube	Version 2.11.1
Lockon Ec Cube	Version 2.11.2
Lockon Ec Cube	Version 2.11.3
Lockon Ec Cube	Version 2.11.4
Lockon Ec Cube	Version 2.11.5

Configuration B

7 vulnerable

Vulnerable Software	Affected Versions
Lockon Ec Cube	Version 2.12.0
Lockon Ec Cube	Version 2.12.1
Lockon Ec Cube	Version 2.12.2
Lockon Ec Cube	Version 2.12.3
Lockon Ec Cube	Version 2.12.3en
Lockon Ec Cube	Version 2.12.3enp1
Lockon Ec Cube	Version 2.12.3enp2