AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2013-4702

MEDIUM · CVSS 5 EPSS 2.10%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2013-08-30 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE
CVE-2013-4702
Severity
MEDIUM
CVSS
5
EPSS
2.10%
Windows

Original Filing — NVD Description

Multiple directory traversal vulnerabilities in the doApiAction function in data/class/api/SC_Api_Operation.php in LOCKON EC-CUBE 2.12.0 through 2.12.5 on Windows allow remote attackers to read arbitrary files via vectors involving a (1) Operation, (2) Service, (3) Style, (4) Validate, or (5) Version value.