CVE-2013-2315

data/class/pages/forgot/LC_Page_Forgot.php in LOCKON EC-CUBE 2.11.0 through 2.12.3enP2 does not properly validate the input to the password reminder function…

published May 29, 2013

CVSS
—
EPSS
1%
Percentile
71.7
In the wild
Unconfirmed
What it is

data/class/pages/forgot/LC_Page_Forgot.php in LOCKON EC-CUBE 2.11.0 through 2.12.3enP2 does not properly validate the input to the password reminder function, which allows remote attackers to obtain sensitive information via a crafted request.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01369 · 71.7th percentile
Published
2013-05-29T19:00Z
EPSS history
Timeline
  • 29 MAY 19:00Z
    data/class/pages/forgot/LC_Page_Forgot.php in LOCKON EC-CUBE 2.11.0 through 2.12.3enP2 does not properly validate the input to the password reminder function…
    cvelistv5