CVE-2013-5991

LOCKON EC-CUBE 2.11.0-2.11.5 - Exposure of Sensitive Information via Error-Log Output

Title source: llm
STIX 2.1

Description

The displaySystemError function in html/handle_error.php in LOCKON EC-CUBE 2.11.0 through 2.11.5 allows remote attackers to obtain sensitive information by leveraging incorrect handling of error-log output.

References (3)

Core 3
Core References
Third Party Advisory third-party-advisory x_refsource_jvn
http://jvn.jp/en/jp/JVN61077110/index.html
Exploit, Patch x_refsource_confirm
http://www.ec-cube.net/info/weakness/weakness.php?id=54
Third Party Advisory third-party-advisory x_refsource_jvndb
http://jvndb.jvn.jp/jvndb/JVNDB-2013-000104

Scores

EPSS 0.0131
EPSS Percentile 67.2%

Details

CWE
CWE-200
Status published
Products (6)
lockon/ec-cube 2.11.0 (3 CPE variants)
lockon/ec-cube 2.11.1
lockon/ec-cube 2.11.2
lockon/ec-cube 2.11.3
lockon/ec-cube 2.11.4
lockon/ec-cube 2.11.5
Published Nov 21, 2013
Tracked Since Feb 18, 2026