JVN#40696431: EC-CUBE plugin "Coupon Plugin" vulnerable to SQL injection

Overview

EC-CUBE plugin "Coupon Plugin" contains an SQL injection vulnerability.

Products Affected

Coupon Plugin Ver1.5 and earlier

Description

EC-CUBE plugin "Coupon Plugin" provided by Seed Inc. contains an SQL injection vulnerability (CWE-89).

Impact

Information stored in the database may be obtained or altered by a remote attacker.

Solution

Update the plugin
Update to the latest version according to the information provided by the developer.

Vendor Status

Vendor	Status	Last Update	Vendor Notes
Seed Inc.	Vulnerable	2016/07/22	Seed Inc. website

References

JPCERT/CC Addendum

Vulnerability Analysis by JPCERT/CC

CVSS v3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Base Score: 6.5

Attack Vector(AV)	Physical (P)	Local (L)	Adjacent (A)	Network (N)
Attack Complexity(AC)	High (H)	Low (L)
Privileges Required(PR)	High (H)	Low (L)	None (N)
User Interaction(UI)	Required (R)	None (N)
Scope(S)	Unchanged (U)	Changed (C)
Confidentiality Impact(C)	None (N)	Low (L)	High (H)
Integrity Impact(I)	None (N)	Low (L)	High (H)
Availability Impact(A)	None (N)	Low (L)	High (H)

CVSS v2 AV:N/AC:L/Au:N/C:P/I:P/A:N

Base Score: 6.4

Access Vector(AV)	Local (L)	Adjacent Network (A)	Network (N)
Access Complexity(AC)	High (H)	Medium (M)	Low (L)
Authentication(Au)	Multiple (M)	Single (S)	None (N)
Confidentiality Impact(C)	None (N)	Partial (P)	Complete (C)
Integrity Impact(I)	None (N)	Partial (P)	Complete (C)
Availability Impact(A)	None (N)	Partial (P)	Complete (C)

Credit

Gen Sato of TRADE WORKS Co.,Ltd. Security Dept. reported this vulnerability to IPA.
JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.

Other Information

JPCERT Alert
JPCERT Reports
CERT Advisory
CPNI Advisory
TRnotes
CVE	CVE-2016-4837
JVN iPedia	JVNDB-2016-000130

JVN#40696431 EC-CUBE plugin "Coupon Plugin" vulnerable to SQL injection