https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-15T21:46:11.696012+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-103671 fkie_cve-2026-103671 2026-10-15T21:46:11.698226+00:00

External control of assumed-Immutable web parameter issue exists in EC-CUBE plugin (for EC-CUBE 4 series) "AmazonPay Plugin". If exploited, the user may be redirected to an arbitrary website during the ordering process. As a result, user's account information may be obtained.

 https://db.gcve.eu/vuln/ghsa-9xxh-8f25-hpwm GHSA-9xxh-8f25-hpwm 2026-10-15T21:46:11.698299+00:00

External control of assumed-Immutable web parameter issue exists in EC-CUBE plugin (for EC-CUBE 4 series) "AmazonPay Plugin". If exploited, the user may be redirected to an arbitrary website during the ordering process. As a result, user's account information may be obtained.

 https://db.gcve.eu/vuln/jvndb-2026-000150 jvndb-2026-000150 2026-10-15T21:46:11.698328+00:00

EC-CUBE plugin (for EC-CUBE 4 series) "AmazonPay Plugin provided by EC-CUBE CO.,LTD. contains the following vulnerability.<a href='https://cwe.mitre.org/data/definitions/472.html' target='_blank'></a> <ul><li>External Control of Assumed-Immutable Web Parameter (CWE-472) - CVE-2026-103671</li></ul>The developer states that attacks exploiting the vulnerability has been observed. EC-CUBE CO.,LTD. reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and EC-CUBE CO.,LTD. coordinated under the Information Security Early Warning Partnership.