CVE-2020-5679 | BDVDB-2026-145369 Detail

EC-CUBEEC-CUBE

Description#

Improper restriction of rendered UI layers or frames in EC-CUBE versions from 3.0.0 to 3.0.18 leads to clickjacking attacks. If a user accesses a specially crafted page while logged into the administrative page, unintended operations may be conducted.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.ec-cube.net/info/weakness/
https://jvn.jp/en/jp/JVN24457594/index.html

Exploit#

No public exploit known

History#

Version 12020-12-03Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.