Information from EC-CUBE CO.,LTD.

Vulnerability ID:JVN#43511918
Title:EC-CUBE plugin (for EC-CUBE 4 series) "AmazonPay Plugin" vulnerable to external control of assumed-immutable web parameter
Status:Vulnerable

This is a statement from the vendor itself with no modification by JPCERT/CC.