CVE-2013-2315 - data/class/pages/forgot/LC_Page_Forgot.php in LOCKON EC-CUBE 2.11.0 through 2.12.3enP2 does not properly validate the input to the password reminder function, which allows remote attackers to obtain sensitive information via a crafted request

Back Back to CVE browser

MEDIUM

data/class/pages/forgot/LC_Page_Forgot.php in LOCKON EC-CUBE 2.11.0 through 2.12.3enP2 does not properly validate the input to the password reminder function, which allows remote attackers to obtain sensitive information via a crafted request

Published May 29, 2013

5.0

MEDIUM

CVSS 2.0

EPSS 1.37%

Description

data/class/pages/forgot/LC_Page_Forgot.php in LOCKON EC-CUBE 2.11.0 through 2.12.3enP2 does not properly validate the input to the password reminder function, which allows remote attackers to obtain sensitive information via a crafted request.

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (4)

http://jvn.jp/en/jp/JVN39699406/index.html
third-party-advisoryx_refsource_JVN
http://jvndb.jvn.jp/jvndb/JVNDB-2013-000044
third-party-advisoryx_refsource_JVNDB
http://svn.ec-cube.net/open_trac/changeset/22580
x_refsource_CONFIRM
http://www.ec-cube.net/info/weakness/weakness.php?id=43
x_refsource_CONFIRM

Link	Providers	Tags
http://jvn.jp/en/jp/JVN39699406/index.html		third-party-advisoryx_refsource_JVN
http://jvndb.jvn.jp/jvndb/JVNDB-2013-000044		third-party-advisoryx_refsource_JVNDB
http://svn.ec-cube.net/open_trac/changeset/22580		x_refsource_CONFIRM
http://www.ec-cube.net/info/weakness/weakness.php?id=43		x_refsource_CONFIRM

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner jpcert

Published May 29, 2013

Updated Sep 16, 2024

Reserved Mar 4, 2013

Link CVE-2013-2315

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2013-2315

Red Hat

Severity n/a

Public date n/a

Links CVE-2013-2315

Description

Affected products

Remediation

References (4)

Change history (0)