Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/ec-cube/ec-cube@3.0.17
purl pkg:composer/ec-cube/ec-cube@3.0.17
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-c6vr-e9zn-cbaz EC-CUBE Open redirect vulnerability Open redirect vulnerability in EC-CUBE (EC-CUBE 3.0.0, EC-CUBE 3.0.1, EC-CUBE 3.0.2, EC-CUBE 3.0.3, EC-CUBE 3.0.4, EC-CUBE 3.0.5, EC-CUBE 3.0.6, EC-CUBE 3.0.7, EC-CUBE 3.0.8, EC-CUBE 3.0.9, EC-CUBE 3.0.10, EC-CUBE 3.0.11, EC-CUBE 3.0.12, EC-CUBE 3.0.12-p1, EC-CUBE 3.0.13, EC-CUBE 3.0.14, EC-CUBE 3.0.15, EC-CUBE 3.0.16) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. CVE-2018-16191
GHSA-fcgg-qgxg-2g2x

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-02T04:43:20.986674+00:00 GitLab Importer Fixing VCID-c6vr-e9zn-cbaz https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/ec-cube/ec-cube/CVE-2018-16191.yml 38.6.0