← CVE Intelligence

CVE-2018-0658

GMO Payment Gateway, Inc. / EC-CUBE Payment Module and GMO-PG Payment Module (PG Multi-Payment Service) for EC-CUBE PUBLISHED

Description (CNA)

Input validation issue in EC-CUBE Payment Module (2.12) version 3.5.23 and earlier, EC-CUBE Payment Module (2.11) version 2.3.17 and earlier, GMO-PG Payment Module (PG Multi-Payment Service) (2.12) version 3.5.23 and earlier, GMO-PG Payment Module (PG Multi-Payment Service) (2.11) version 2.3.17 and earlier allows an attacker with administrative rights to execute arbitrary PHP code on the server via unspecified vectors.

Affected (CNA)

Vendor / productVersions
GMO Payment Gateway, Inc. / EC-CUBE Payment Module and GMO-PG Payment Module (PG Multi-Payment Service) for EC-CUBEaffected (EC-CUBE Payment Module (2.12) version 3.5.23 and earlier, EC-CUBE Payment Module (2.11) version 2.3.17 and earlier, GMO-PG Payment Module (PG Multi-Payment Service) (2.12) version 3.5.23 and earlier, and GMO-PG Payment Module (PG Multi-Payment Service) (2.11) version 2.3.17 and earlier)

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.