CVE-2013-5993

Published: Nov 21, 2013Modified: Apr 29, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Cross-site request forgery (CSRF) vulnerability in LOCKON EC-CUBE 2.11.0 through 2.13.0 allows remote attackers to hijack the authentication of arbitrary users via unspecified vectors related to refusals.

Affected (21)

Products: Lockon: Ec Cube

Lockon

1 product

Ec Cube

Configuration A

21 vulnerable

Vulnerable Software	Affected Versions
Lockon Ec Cube	Version 2.11.0
Lockon Ec Cube	Version 2.11.0 beta2
Lockon Ec Cube	Version 2.11.0 beta
Lockon Ec Cube	Version 2.11.1
Lockon Ec Cube	Version 2.11.2
Lockon Ec Cube	Version 2.11.3
Lockon Ec Cube	Version 2.11.4
Lockon Ec Cube	Version 2.11.5
Lockon Ec Cube	Version 2.12.0
Lockon Ec Cube	Version 2.12.1
Lockon Ec Cube	Version 2.12.2
Lockon Ec Cube	Version 2.12.3
Lockon Ec Cube	Version 2.12.3en
Lockon Ec Cube	Version 2.12.3enp1
Lockon Ec Cube	Version 2.12.3enp2
Lockon Ec Cube	Version 2.12.4en
Lockon Ec Cube	Version 2.12.5
Lockon Ec Cube	Version 2.12.5en
Lockon Ec Cube	Version 2.12.6
Lockon Ec Cube	Version 2.12.6en
Lockon Ec Cube	Version 2.13.0