CVE-2013-5994

Published: Nov 21, 2013Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

data/class/pages/mypage/LC_Page_Mypage_DeliveryAddr.php in LOCKON EC-CUBE 2.11.2 through 2.13.0 allows remote attackers to obtain sensitive information via a direct request, which reveals the full path in an error message.

Affected (17)

Products: Lockon: Ec Cube

Lockon

1 product

Ec Cube

Configuration A

17 vulnerable

Vulnerable Software	Affected Versions
Lockon Ec Cube	Version 2.11.2
Lockon Ec Cube	Version 2.11.3
Lockon Ec Cube	Version 2.11.4
Lockon Ec Cube	Version 2.11.5
Lockon Ec Cube	Version 2.12.0
Lockon Ec Cube	Version 2.12.1
Lockon Ec Cube	Version 2.12.2
Lockon Ec Cube	Version 2.12.3
Lockon Ec Cube	Version 2.12.3en
Lockon Ec Cube	Version 2.12.3enp1
Lockon Ec Cube	Version 2.12.3enp2
Lockon Ec Cube	Version 2.12.4en
Lockon Ec Cube	Version 2.12.5
Lockon Ec Cube	Version 2.12.5en
Lockon Ec Cube	Version 2.12.6
Lockon Ec Cube	Version 2.12.6en
Lockon Ec Cube	Version 2.13.0