Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
EC-CUBE 3 series (3.0.0 to 3.0.18-p6) and 4 series (4.0.0 to 4.0.6-p3, 4.1.0 to 4.1.2-p2, and 4.2.0 to 4.2.2) contain an arbitrary code execution vulnerability due to improper settings of the template engine Twig included in the product. As a result, arbitrary code may be executed on the server where the product is running by a user with an administrative privilege.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
EC-CUBE 安全漏洞
Vulnerability Description
EC-CUBE是日本EC-CUBE公司的一套开源的电子商务系统。 EC-CUBE 3 系列（3.0.0 到 3.0.18-p6）版本、4 系列（4.0.0 到 4.0.6-p3、4.1.0 到 4.1.2-p2 、4.2.0 到 4.2.2）版本存在安全漏洞，该漏洞源于模板引擎 Twig 设置不当而导致的任意代码执行，攻击者利用该漏洞可以在运行产品的服务器上执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A