{"api_version":"1","generated_at":"2026-07-23T05:15:38+00:00","cve":"CVE-2011-0451","urls":{"html":"https://cve.report/CVE-2011-0451","api":"https://cve.report/api/cve/CVE-2011-0451.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2011-0451","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2011-0451"},"summary":{"title":"CVE-2011-0451","description":"Multiple cross-site scripting (XSS) vulnerabilities in (1) data/Smarty/templates/default/list.tpl and (2) data/Smarty/templates/default/campaign/bloc/cart_tag.tpl in EC-CUBE before 2.4.4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.","state":"PUBLISHED","assigner":"jpcert","published_at":"2011-02-03 16:00:04","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-79","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://svn.ec-cube.net/open_trac/changeset/18742","name":"http://svn.ec-cube.net/open_trac/changeset/18742","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"Changeset 18742 – EC-CUBE Trac","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/43153","name":"http://secunia.com/advisories/43153","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"EC-CUBE Unspecified Cross-Site Scripting Vulnerability - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://jvndb.jvn.jp/en/contents/2011/JVNDB-2011-000011.html","name":"http://jvndb.jvn.jp/en/contents/2011/JVNDB-2011-000011.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"JVNDB-2011-000011 - JVN iPedia","mime":"text/xml","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/46100","name":"http://www.securityfocus.com/bid/46100","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"EC-CUBE CVE-2011-0451 Multiple Cross Site Scripting Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.ec-cube.net/info/weakness/weakness.php?id=36","name":"http://www.ec-cube.net/info/weakness/weakness.php?id=36","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"脆弱性 | ECサイト構築・リニューアルは「ECオープンプラットフォームEC-CUBE」","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://jvn.jp/en/jp/JVN84393059/index.html","name":"http://jvn.jp/en/jp/JVN84393059/index.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"JVN#84393059: EC-CUBE vulnerable to cross-site scripting","mime":"text/xml","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/65079","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/65079","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-0451","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-0451","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2011","cve_id":"451","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"lockon","cpe5":"ec-cube","cpe6":"1.1.0","cpe7":"beta","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"451","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"lockon","cpe5":"ec-cube","cpe6":"1.1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"451","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"lockon","cpe5":"ec-cube","cpe6":"1.2.0","cpe7":"beta","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"451","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"lockon","cpe5":"ec-cube","cpe6":"1.3.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"451","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"lockon","cpe5":"ec-cube","cpe6":"1.3.0","cpe7":"beta","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"451","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"lockon","cpe5":"ec-cube","cpe6":"1.3.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"451","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"lockon","cpe5":"ec-cube","cpe6":"1.3.1","cpe7":"a","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"451","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"lockon","cpe5":"ec-cube","cpe6":"1.3.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"451","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"lockon","cpe5":"ec-cube","cpe6":"1.3.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"451","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"lockon","cpe5":"ec-cube","cpe6":"1.3.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"451","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"lockon","cpe5":"ec-cube","cpe6":"1.3.4","cpe7":"community","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"451","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"lockon","cpe5":"ec-cube","cpe6":"1.4.0","cpe7":"a-beta","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"451","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"lockon","cpe5":"ec-cube","cpe6":"1.4.0","cpe7":"beta","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"451","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"lockon","cpe5":"ec-cube","cpe6":"1.4.1","cpe7":"beta","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"451","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"lockon","cpe5":"ec-cube","cpe6":"1.4.2","cpe7":"beta","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"451","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"lockon","cpe5":"ec-cube","cpe6":"1.4.3","cpe7":"a-beta","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"451","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"lockon","cpe5":"ec-cube","cpe6":"1.4.3","cpe7":"b-beta","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"451","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"lockon","cpe5":"ec-cube","cpe6":"1.4.3","cpe7":"beta","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"451","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"lockon","cpe5":"ec-cube","cpe6":"1.4.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"451","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"lockon","cpe5":"ec-cube","cpe6":"1.4.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"451","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"lockon","cpe5":"ec-cube","cpe6":"1.4.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"451","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"lockon","cpe5":"ec-cube","cpe6":"1.5.0","cpe7":"beta","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"451","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"lockon","cpe5":"ec-cube","cpe6":"2.0.0","cpe7":"beta","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"451","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"lockon","cpe5":"ec-cube","cpe6":"2.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"451","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"lockon","cpe5":"ec-cube","cpe6":"2.0.1","cpe7":"a","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"451","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"lockon","cpe5":"ec-cube","cpe6":"2.1.0","cpe7":"beta","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"451","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"lockon","cpe5":"ec-cube","cpe6":"2.1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"451","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"lockon","cpe5":"ec-cube","cpe6":"2.1.2","cpe7":"a","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"451","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"lockon","cpe5":"ec-cube","cpe6":"2.11.0","cpe7":"beta","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"451","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"lockon","cpe5":"ec-cube","cpe6":"2.2.0","cpe7":"beta","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"451","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"lockon","cpe5":"ec-cube","cpe6":"2.2.1","cpe7":"one","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"451","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"lockon","cpe5":"ec-cube","cpe6":"2.3.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"451","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"lockon","cpe5":"ec-cube","cpe6":"2.3.0","cpe7":"rc1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"451","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"lockon","cpe5":"ec-cube","cpe6":"2.3.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"451","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"lockon","cpe5":"ec-cube","cpe6":"2.3.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"451","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"lockon","cpe5":"ec-cube","cpe6":"2.3.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"451","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"lockon","cpe5":"ec-cube","cpe6":"2.4.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"451","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"lockon","cpe5":"ec-cube","cpe6":"2.4.0","cpe7":"rc1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"451","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"lockon","cpe5":"ec-cube","cpe6":"2.4.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"451","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"lockon","cpe5":"ec-cube","cpe6":"2.4.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"451","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"lockon","cpe5":"ec-cube","cpe6":"2.4.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"451","vulnerable":"1","versionEndIncluding":"2.4.3","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"lockon","cpe5":"ec-cube","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[{"cve":"CVE-2011-0451","qid":"996704","title":"PHP (Composer) Security Update for ec-cube/ec-cube (GHSA-wgvv-5396-ggvj)"}]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T21:51:08.678Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"JVN#84393059","tags":["third-party-advisory","x_refsource_JVN","x_transferred"],"url":"http://jvn.jp/en/jp/JVN84393059/index.html"},{"name":"43153","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/43153"},{"name":"46100","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/46100"},{"name":"ec-cube-list-xss(65079)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/65079"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://svn.ec-cube.net/open_trac/changeset/18742"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.ec-cube.net/info/weakness/weakness.php?id=36"},{"name":"JVNDB-2011-000011","tags":["third-party-advisory","x_refsource_JVNDB","x_transferred"],"url":"http://jvndb.jvn.jp/en/contents/2011/JVNDB-2011-000011.html"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2010-06-29T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in (1) data/Smarty/templates/default/list.tpl and (2) data/Smarty/templates/default/campaign/bloc/cart_tag.tpl in EC-CUBE before 2.4.4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-08-16T14:57:01.000Z","orgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","shortName":"jpcert"},"references":[{"name":"JVN#84393059","tags":["third-party-advisory","x_refsource_JVN"],"url":"http://jvn.jp/en/jp/JVN84393059/index.html"},{"name":"43153","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/43153"},{"name":"46100","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/46100"},{"name":"ec-cube-list-xss(65079)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/65079"},{"tags":["x_refsource_CONFIRM"],"url":"http://svn.ec-cube.net/open_trac/changeset/18742"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.ec-cube.net/info/weakness/weakness.php?id=36"},{"name":"JVNDB-2011-000011","tags":["third-party-advisory","x_refsource_JVNDB"],"url":"http://jvndb.jvn.jp/en/contents/2011/JVNDB-2011-000011.html"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"vultures@jpcert.or.jp","ID":"CVE-2011-0451","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple cross-site scripting (XSS) vulnerabilities in (1) data/Smarty/templates/default/list.tpl and (2) data/Smarty/templates/default/campaign/bloc/cart_tag.tpl in EC-CUBE before 2.4.4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"JVN#84393059","refsource":"JVN","url":"http://jvn.jp/en/jp/JVN84393059/index.html"},{"name":"43153","refsource":"SECUNIA","url":"http://secunia.com/advisories/43153"},{"name":"46100","refsource":"BID","url":"http://www.securityfocus.com/bid/46100"},{"name":"ec-cube-list-xss(65079)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/65079"},{"name":"http://svn.ec-cube.net/open_trac/changeset/18742","refsource":"CONFIRM","url":"http://svn.ec-cube.net/open_trac/changeset/18742"},{"name":"http://www.ec-cube.net/info/weakness/weakness.php?id=36","refsource":"CONFIRM","url":"http://www.ec-cube.net/info/weakness/weakness.php?id=36"},{"name":"JVNDB-2011-000011","refsource":"JVNDB","url":"http://jvndb.jvn.jp/en/contents/2011/JVNDB-2011-000011.html"}]}}}},"cveMetadata":{"assignerOrgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","assignerShortName":"jpcert","cveId":"CVE-2011-0451","datePublished":"2011-02-03T15:00:00.000Z","dateReserved":"2011-01-14T00:00:00.000Z","dateUpdated":"2024-08-06T21:51:08.678Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2011-02-03 16:00:04","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-79","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lockon:ec-cube:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4.3","matchCriteriaId":"6FDD4E3A-ED5C-469F-84D3-DA2896D29E3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:lockon:ec-cube:1.1.0:beta:*:*:*:*:*:*","matchCriteriaId":"CEC9058D-A282-4982-BE25-CC71C9C2F501"},{"vulnerable":true,"criteria":"cpe:2.3:a:lockon:ec-cube:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"A8E8EDD5-740A-4B0F-8A9F-E1A88CA22C31"},{"vulnerable":true,"criteria":"cpe:2.3:a:lockon:ec-cube:1.2.0:beta:*:*:*:*:*:*","matchCriteriaId":"48491157-58B0-4D11-97FA-5B74206C0B7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:lockon:ec-cube:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"D870D2DB-2C8E-474F-BF03-2EB0BA001DD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:lockon:ec-cube:1.3.0:beta:*:*:*:*:*:*","matchCriteriaId":"18174C4A-F379-4494-8DCA-358E0863A1E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:lockon:ec-cube:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"EA54C320-AC8F-4589-888D-74DCD6679F06"},{"vulnerable":true,"criteria":"cpe:2.3:a:lockon:ec-cube:1.3.1:a:*:*:*:*:*:*","matchCriteriaId":"63983D4D-14D3-4709-9AD5-6B7BCE17705B"},{"vulnerable":true,"criteria":"cpe:2.3:a:lockon:ec-cube:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"C920D358-FEFA-4298-9B2B-45B312A82EAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:lockon:ec-cube:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"6DFAF827-DFF5-4682-8150-370C0B166418"},{"vulnerable":true,"criteria":"cpe:2.3:a:lockon:ec-cube:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"464FB8FF-5027-46B7-8649-B5983C15B28A"},{"vulnerable":true,"criteria":"cpe:2.3:a:lockon:ec-cube:1.3.4:community:*:*:*:*:*:*","matchCriteriaId":"56E6BE02-0581-45F2-8A79-1263493A9609"},{"vulnerable":true,"criteria":"cpe:2.3:a:lockon:ec-cube:1.4.0:a-beta:*:*:*:*:*:*","matchCriteriaId":"EB577943-8950-454F-B2E4-95911110038C"},{"vulnerable":true,"criteria":"cpe:2.3:a:lockon:ec-cube:1.4.0:beta:*:*:*:*:*:*","matchCriteriaId":"3426FF28-4782-43F2-A438-42FC31FAB369"},{"vulnerable":true,"criteria":"cpe:2.3:a:lockon:ec-cube:1.4.1:beta:*:*:*:*:*:*","matchCriteriaId":"96EEF919-E417-4CEA-BF10-074011907138"},{"vulnerable":true,"criteria":"cpe:2.3:a:lockon:ec-cube:1.4.2:beta:*:*:*:*:*:*","matchCriteriaId":"381AE319-FEF0-40A5-90AB-58669C7516D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:lockon:ec-cube:1.4.3:a-beta:*:*:*:*:*:*","matchCriteriaId":"F53838DC-799A-40B1-90A0-1EC190EA62C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:lockon:ec-cube:1.4.3:b-beta:*:*:*:*:*:*","matchCriteriaId":"4FAFDB13-2E78-4A0C-8E0F-7F59007BECFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:lockon:ec-cube:1.4.3:beta:*:*:*:*:*:*","matchCriteriaId":"47B7ECDC-70F1-45B1-90A4-470583A9C5EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:lockon:ec-cube:1.4.5:*:*:*:*:*:*:*","matchCriteriaId":"6A45D1DC-06E6-4E29-8C10-9F7EE977C852"},{"vulnerable":true,"criteria":"cpe:2.3:a:lockon:ec-cube:1.4.6:*:*:*:*:*:*:*","matchCriteriaId":"B1C39F07-E604-4847-8422-A1FE5EF6EB83"},{"vulnerable":true,"criteria":"cpe:2.3:a:lockon:ec-cube:1.4.7:*:*:*:*:*:*:*","matchCriteriaId":"DC55E110-392A-4CB6-806D-295E5A1662CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:lockon:ec-cube:1.5.0:beta:*:*:*:*:*:*","matchCriteriaId":"6D8E63D8-0D7D-49C7-8FE1-DAC8F874A9F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:lockon:ec-cube:2.0.0:beta:*:*:*:*:*:*","matchCriteriaId":"C567C953-E1F9-4B07-AB18-A38CA4D3A59F"},{"vulnerable":true,"criteria":"cpe:2.3:a:lockon:ec-cube:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"552B8BF8-50E1-4F9E-A96F-B5D473F7991F"},{"vulnerable":true,"criteria":"cpe:2.3:a:lockon:ec-cube:2.0.1:a:*:*:*:*:*:*","matchCriteriaId":"18200777-61C3-436F-895B-37766CA0E8A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:lockon:ec-cube:2.1.0:beta:*:*:*:*:*:*","matchCriteriaId":"9C58C094-451F-4A72-8838-E8F7E6709B27"},{"vulnerable":true,"criteria":"cpe:2.3:a:lockon:ec-cube:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"7B7F2462-1D8E-4430-A619-D1EF56CB87CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:lockon:ec-cube:2.1.2:a:*:*:*:*:*:*","matchCriteriaId":"C56708E2-FD29-4A00-9B6C-01690C7159FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:lockon:ec-cube:2.2.0:beta:*:*:*:*:*:*","matchCriteriaId":"2C9504AE-E763-4092-A8A9-468C4B5B8FE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:lockon:ec-cube:2.2.1:one:*:*:*:*:*:*","matchCriteriaId":"31E5BBF2-3338-4ACE-AFDC-9C0818A32053"},{"vulnerable":true,"criteria":"cpe:2.3:a:lockon:ec-cube:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"CC9672CF-654F-4D1F-87F0-FBBFAD7FADDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:lockon:ec-cube:2.3.0:rc1:*:*:*:*:*:*","matchCriteriaId":"D281225F-A40E-4CF1-8E98-D3B1A668042E"},{"vulnerable":true,"criteria":"cpe:2.3:a:lockon:ec-cube:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"42C428B1-C5F8-482B-A772-8FD676D78AE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:lockon:ec-cube:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"6101D519-D090-40C3-90E1-71C6CBA0FE43"},{"vulnerable":true,"criteria":"cpe:2.3:a:lockon:ec-cube:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"7BA23AC9-EE28-482D-8564-4313FF37AE2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:lockon:ec-cube:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"FF341A1B-2FFF-46B1-82E5-883681F3467C"},{"vulnerable":true,"criteria":"cpe:2.3:a:lockon:ec-cube:2.4.0:rc1:*:*:*:*:*:*","matchCriteriaId":"54999245-399B-4535-8F2C-1F19CB06A053"},{"vulnerable":true,"criteria":"cpe:2.3:a:lockon:ec-cube:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"A7FEF399-9399-4F4D-B866-763695F09ADA"},{"vulnerable":true,"criteria":"cpe:2.3:a:lockon:ec-cube:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"2194828B-243E-49A2-8D71-B61B6C440FF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:lockon:ec-cube:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"F426468C-9A4A-4987-84E8-CA314E123DA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:lockon:ec-cube:2.11.0:beta:*:*:*:*:*:*","matchCriteriaId":"8A85840E-73A5-411D-912A-A1CEA7852904"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2011","CveId":"451","Ordinal":"1","Title":"CVE-2011-0451","CVE":"CVE-2011-0451","Year":"2011"},"notes":[{"CveYear":"2011","CveId":"451","Ordinal":"1","NoteData":"Multiple cross-site scripting (XSS) vulnerabilities in (1) data/Smarty/templates/default/list.tpl and (2) data/Smarty/templates/default/campaign/bloc/cart_tag.tpl in EC-CUBE before 2.4.4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.","Type":"Description","Title":"CVE-2011-0451"},{"CveYear":"2011","CveId":"451","Ordinal":"2","NoteData":"2011-02-03","Type":"Other","Title":"Published"},{"CveYear":"2011","CveId":"451","Ordinal":"3","NoteData":"2017-08-16","Type":"Other","Title":"Modified"}]}}}