| Max CVSS | 6.8 | Min CVSS | 5.0 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2016-1201 | 6.8 |
Cross-site request forgery (CSRF) vulnerability in LOCKON EC-CUBE 3.0.0 through 3.0.9 allows remote attackers to hijack the authentication of administrators.
|
28-11-2016 - 19:58 | 30-04-2016 - 10:59 | |
| CVE-2016-1200 | 6.5 |
The management screen in LOCKON EC-CUBE 3.0.7 through 3.0.9 allows remote authenticated users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2016-1199.
|
28-11-2016 - 19:58 | 30-04-2016 - 10:59 | |
| CVE-2016-1199 | 5.0 |
The login page in the management screen in LOCKON EC-CUBE 3.0.0 through 3.0.9 allows remote attackers to bypass intended IP address restrictions via unspecified vectors, a different vulnerability than CVE-2016-1200.
|
06-05-2016 - 01:09 | 30-04-2016 - 10:59 |