NVD

Id
51381  
Name
CVE-2009-4236  
Description
The process function in data/class/pages/admin/customer/LC_Page_Admin_Customer_SearchCustomer.php in EC-CUBE Ver2 2.4.0 RC1 through 2.4.1, and Community Edition r18068 through r18428, allows remote attackers to obtain sensitive information (customer data) via unknown vectors related to sessions.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2009-12-08  
Modified Date
2009-12-09  
Seq
2009-4236  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
260543 51381 CVE-2009-4236 JVN#79762947  View
260544 51381 CVE-2009-4236 JVNDB-2009-000078  View
260545 51381 CVE-2009-4236 http://www.ec-cube.net/info/091127/  View
260546 51381 CVE-2009-4236 http://www.ipa.go.jp/security/vuln/documents/2009/200912_ec-cube.html  View
260547 51381 CVE-2009-4236 ADV-2009-3421  View
260548 51381 CVE-2009-4236 eccube-searchcustomer-security-bypass(54573)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
39992 JVNDB-2009-000078 EC-CUBE における情報漏えいの脆弱性 株式会社ロックオンが提供する EC-CUBE には、情報漏えいの脆弱性が存在します。 CVE-2009-4236 41667 CVE-2009-4236 51381 5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000078.html 2009-12-07 2009-12-07 View