CVE-2011-3988: Lockon Ec-Cube

High severity, CVSS 7.5. EPSS: 2.3% chance of exploitation in the next 30 days.

SQL injection vulnerability in data/class/SC_Query.php in EC-CUBE 2.11.0 through 2.11.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Affected products

• Lockon Ec-Cube: version 2.11.0 only; version 2.11.1 only; version 2.11.2 only

Published 2011-10-21. Last modified 2026-06-16.