CVE-2013-2313

Lockon Ec-cube - Authentication Bypass

Title source: rule

Description

Session fixation vulnerability in LOCKON EC-CUBE 2.11.0 through 2.12.3enP2 allows remote attackers to hijack web sessions via unspecified vectors.

Scores

EPSS 0.0031
EPSS Percentile 54.0%

Classification

CWE
CWE-287
Status draft

Affected Products (13)

lockon/ec-cube
lockon/ec-cube
lockon/ec-cube
lockon/ec-cube
lockon/ec-cube
lockon/ec-cube
lockon/ec-cube
lockon/ec-cube
lockon/ec-cube
lockon/ec-cube
lockon/ec-cube
lockon/ec-cube
lockon/ec-cube

Timeline

Published May 29, 2013
Tracked Since Feb 18, 2026