External control of assumed-Immutable web parameter issue exists in EC-CUBE plugin (for EC-CUBE 4 series) "AmazonPay Plugin". If exploited, the user may be redirected to an arbitrary website during the ordering process. As a result, user's account information may be obtained.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
AmazonPay V2 Plugin (4.0/4.1 series)
Vendor
EC-CUBE CO.,LTD.
Product
AmazonPay V2 Plugin (4.0/4.1 series)
Platforms
Unknown
Default status
unaffected
AmazonPay V2 Plugin (4.0/4.1 series) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
v1.1.7
affected
semver
Unavailable
v1.1.12
None listed
AmazonPay V2 Plugin (4.0/4.1 series)
Vendor
EC-CUBE CO.,LTD.
Product
AmazonPay V2 Plugin (4.0/4.1 series)
Platforms
Unknown
Default status
unaffected
AmazonPay V2 Plugin (4.0/4.1 series) · Scoped product and version facts