NVD

Id
10542  
Name
CVE-2011-3988  
Description
SQL injection vulnerability in data/class/SC_Query.php in EC-CUBE 2.11.0 through 2.11.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2011-10-21  
Modified Date
2012-05-14  
Seq
2011-3988  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
59741 10542 CVE-2011-3988 JVN#44496332  View
59742 10542 CVE-2011-3988 JVNDB-2011-000087  View
59743 10542 CVE-2011-3988 http://svn.ec-cube.net/open_trac/ticket/1502  View
59744 10542 CVE-2011-3988 http://www.ec-cube.net/info/weakness/weakness.php?id=38  View
59745 10542 CVE-2011-3988 http://www.ec-cube.net/release/detail.php?release_id=286  View
59746 10542 CVE-2011-3988 50140  View
59747 10542 CVE-2011-3988 eccube-scquery-sql-injection(70625)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30739 JVNDB-2011-000087 EC-CUBE における SQL インジェクションの脆弱性 EC-CUBE には、SQL インジェクションの脆弱性が存在します。 CVE-2011-3988 51895 CVE-2011-3988 10542 5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000087.html 2011-10-14 2011-10-14 View