CVE-2013-2315

Published: May 29, 2013Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

data/class/pages/forgot/LC_Page_Forgot.php in LOCKON EC-CUBE 2.11.0 through 2.12.3enP2 does not properly validate the input to the password reminder function, which allows remote attackers to obtain sensitive information via a crafted request.

Affected (13)

Products: Lockon: Ec Cube

Lockon

1 product

Ec Cube

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Lockon Ec Cube	Version 2.11.0
Lockon Ec Cube	Version 2.11.1
Lockon Ec Cube	Version 2.11.2
Lockon Ec Cube	Version 2.11.3
Lockon Ec Cube	Version 2.11.4
Lockon Ec Cube	Version 2.11.5

Configuration B

7 vulnerable

Vulnerable Software	Affected Versions
Lockon Ec Cube	Version 2.12.0
Lockon Ec Cube	Version 2.12.1
Lockon Ec Cube	Version 2.12.2
Lockon Ec Cube	Version 2.12.3
Lockon Ec Cube	Version 2.12.3en
Lockon Ec Cube	Version 2.12.3enp1
Lockon Ec Cube	Version 2.12.3enp2