\u5f0a\u793e\u914d\u5e03\u4e2d\u306e\u30aa\u30fc\u30d7\u30f3\u30bd\u30fc\u30b9EC\u30b5\u30a4\u30c8\u69cb\u7bc9\u30d1\u30c3\u30b1\u30fc\u30b8\u300cECCUBE\u300d\u5411\u3051\u30d7\u30e9\u30b0\u30a4\u30f3\u306b\u3064\u304d\u307e\u3057\u3066\u3001\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\u306e\u8106\u5f31\u6027\u304c\u898b\u3064\u304b\u308a\u307e\u3057\u305f\u306e\u3067\u3001\u4ee5\u4e0b\u306e\u901a\u308a\u3054\u5831\u544a\u53ca\u3073\u5bfe\u7b56\u65b9\u6cd5\u3092\u304a\u77e5\u3089\u305b\u3044\u305f\u3057\u307e\u3059\u3002<\/p>\n
\u5c1a\u3001\u5bfe\u7b56\u6e08\u307f\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u7248\u306f\u672c\u65e5\u3088\u308a\u516c\u958b\u914d\u5e03\u3057\u3066\u304a\u308a\u307e\u3059\u306e\u3067\u3001\u3054\u5229\u7528\u4e2d\u306e\u65b9\u306f\u5927\u5909\u304a\u624b\u6570\u3067\u3059\u304c\u3001\u4e0b\u8a18\u306e\u624b\u9806\u3067ECCUBE\u7ba1\u7406\u753b\u9762\u3088\u308a\u30d7\u30e9\u30b0\u30a4\u30f3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u9802\u304d\u307e\u3059\u3088\u3046\u3001\u5b9c\u3057\u304f\u304a\u9858\u3044\u7533\u3057\u4e0a\u3052\u307e\u3059\u3002<\/p>\n
\u3010\u3054\u6ce8\u610f\u3011
\n\u30d7\u30e9\u30b0\u30a4\u30f3\u53ca\u3073\u30d7\u30e9\u30b0\u30a4\u30f3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u306fECCUBE\u30c7\u30d5\u30a9\u30eb\u30c8\u72b6\u614b\u306b\u5bfe\u3057\u3066\u306e\u307f\u30c6\u30b9\u30c8\u3001\u691c\u8a3c\u3092\u884c\u3063\u3066\u304a\u308a\u307e\u3059\u3002
\n\u30c7\u30d5\u30a9\u30eb\u30c8\u4ee5\u5916\u306e\u4f55\u3089\u304b\u306e\u30ab\u30b9\u30bf\u30de\u30a4\u30ba\u65bd\u5de5\u304c\u3042\u308b\u5834\u5408\u3084\u4ed6\u306e\u30d7\u30e9\u30b0\u30a4\u30f3\u7af6\u5408\u7b49\u306b\u3088\u308b\u5f71\u97ff\u306b\u3064\u304d\u307e\u3057\u3066\u306f\u3001\u30b5\u30a4\u30c8\u69cb\u7bc9\u53ca\u3073\u30ab\u30b9\u30bf\u30de\u30a4\u30ba\u3055\u308c\u305f\u5185\u5bb9\u3092\u691c\u8a3c\u306e\u4e0a\u3001\u9069\u7528\u9802\u304d\u307e\u3059\u3088\u3046\u5b9c\u3057\u304f\u304a\u9858\u3044\u7533\u3057\u4e0a\u3052\u307e\u3059\u3002
\n\u203b\u30c7\u30d5\u30a9\u30eb\u30c8\u72b6\u614b\u4ee5\u5916\u3078\u306e\u9069\u7528\u306b\u3064\u304d\u307e\u3057\u3066\u306e\u52d5\u4f5c\u4fdd\u8a3c\u306f\u51fa\u6765\u307e\u305b\u3093\u306e\u3067\u3054\u7406\u89e3\u306e\u7a0b\u5b9c\u3057\u304f\u304a\u9858\u3044\u7533\u3057\u4e0a\u3052\u307e\u3059\u3002<\/p>\n
<\/p>\n
\u25a0\u6982\u8981<\/strong> \u300c\u30ab\u30c6\u30b4\u30ea\u6bce(\u5546\u54c1\u4e00\u89a7\u30da\u30fc\u30b8)\u30d5\u30ea\u30fc\u30a8\u30ea\u30a2\u8ffd\u52a0\u30d7\u30e9\u30b0\u30a4\u30f3\u300d<\/p>\n \u306b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\u306e\u8106\u5f31\u6027\u304c\u5b58\u5728\u3059\u308b\u3053\u3068\u304c\u5224\u660e\u3057\u307e\u3057\u305f\u3002<\/p>\n \u3053\u306e\u8106\u5f31\u6027\u3092\u60aa\u7528\u3055\u308c\u305f\u5834\u5408\u3001\u60aa\u610f\u3042\u308b\u7b2c\u4e09\u8005\u306e\u653b\u6483\u306b\u3088\u308a\u3001\u30bb\u30c3\u30b7\u30e7\u30f3\u306e\u4e57\u3063\u53d6\u308a\u3001\u4e0d\u6b63\u306a\u30b5\u30a4\u30c8\u3078\u306e\u30ea\u30c0\u30a4\u30ec\u30af\u30c8\u306a\u3069\u3001\u4e0d\u6b63\u306a\u30d7\u30ed\u30b0\u30e9\u30e0\u3092\u5b9f\u884c\u3055\u308c\u308b\u5371\u967a\u6027\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n \u3053\u306e\u554f\u984c\u306e\u5f71\u97ff\u3092\u53d7\u3051\u308b \u25a0\u8a72\u5f53\u88fd\u54c1\u306e\u78ba\u8a8d\u65b9\u6cd5<\/strong><\/p>\n \u5f71\u97ff\u3092\u53d7\u3051\u308b\u88fd\u54c1\u306f\u4ee5\u4e0b\u306e\u88fd\u54c1\u3067\u3059\u3002 \u4f7f\u7528\u3057\u3066\u3044\u308b\u30d0\u30fc\u30b8\u30e7\u30f3\u756a\u53f7\u306e\u78ba\u8a8d\u65b9\u6cd5\u306f\u4ee5\u4e0b\u306e\u901a\u308a\u3067\u3059\u3002<\/p>\n 1.ECCUBE\u7ba1\u7406\u753b\u9762\u306b\u30ed\u30b0\u30a4\u30f3\u3057\u307e\u3059\u3002 \u25a0\u8106\u5f31\u6027\u306e\u8aac\u660e<\/strong><\/p>\n \u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\u306b\u3088\u308b\u4e0d\u6b63\u306a\u30d7\u30ed\u30b0\u30e9\u30e0\u306e\u5b9f\u884c<\/p>\n \u25a0\u8106\u5f31\u6027\u304c\u3082\u305f\u3089\u3059\u8105\u5a01<\/strong><\/p>\n \u30bb\u30c3\u30b7\u30e7\u30f3\u306e\u4e57\u3063\u53d6\u308a\u3001\u4e0d\u6b63\u306a\u30b5\u30a4\u30c8\u3078\u306e\u30ea\u30c0\u30a4\u30ec\u30af\u30c8\u3055\u308c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n \u25a0\u5bfe\u7b56\u65b9\u6cd5\uff08\u5bfe\u7b56\u6e08\u307f\u88fd\u54c1\u3078\u306e\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u65b9\u6cd5\uff09<\/strong> \u25a0\u95a2\u9023\u60c5\u5831<\/strong> \u5546\u54c1\u6bce(\u5546\u54c1\u8a73\u7d30\u30da\u30fc\u30b8)\u30d5\u30ea\u30fc\u30a8\u30ea\u30a2\u8ffd\u52a0\u30d7\u30e9\u30b0\u30a4\u30f3 \u25a0\u8b1d\u8f9e<\/strong> ———————————————————————————–<\/p>\n EC-CUBE plugins \u25a0 Overview<\/strong> \u25a0 How to check product<\/strong> \u25a0 How to check the version number you are using<\/strong> 2.Open the Owner’s Store> plugin management> plugin management of the header menu.<\/p>\n 3.Number listed in the back of the plugin name of the plugin list that has become available is the version number in ECCUBE.<\/p>\n 4.If the version number is “1.0”, it is a plugin that vulnerable. \u25a0 Vulnerability of description<\/strong><\/p>\n Execution of unauthorized programs due to cross-site scripting.<\/p>\n \u25a0 Threat vulnerability brings<\/strong><\/p>\n Session hijacking, it may be redirected to a fraudulent site.<\/p>\n \u25a0 countermeasures (update how to measure product)<\/strong><\/p>\n 1.Login to the ECCUBE management screen.<\/p>\n 2.Open the Owner’s Store> plugin management> plugin management of the header menu.<\/p>\n 3.If you number listed in the back of the plugin name of the plugin list that is in use has become a “1.0” ECCUBE, click on the text link in the “Update” in the “plugin settings” item Please perform the update by. 4.After the completion of the update, please make sure that the version number is “1.1”.<\/p>\n \u25a0 Related Information<\/strong> [itemdetail_freearea_ addition_plugin] \u25a0 Acknowledgements<\/strong> \u5f0a\u793e\u914d\u5e03\u4e2d\u306e\u30aa\u30fc\u30d7\u30f3\u30bd\u30fc\u30b9EC\u30b5\u30a4\u30c8\u69cb\u7bc9\u30d1\u30c3\u30b1\u30fc\u30b8\u300cECCUBE\u300d\u5411\u3051\u30d7\u30e9\u30b0\u30a4\u30f3\u306b\u3064\u304d\u307e\u3057\u3066\u3001\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\u306e\u8106\u5f31\u6027\u304c\u898b\u3064\u304b\u308a\u307e\u3057\u305f\u306e\u3067\u3001\u4ee5\u4e0b\u306e\u901a… \u3082\u3063\u3068\u8aad\u3080 »<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4,7],"tags":[17,52,109,110],"class_list":{"0":"post-583","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-plugin","7":"category-topics","8":"tag-ec-cube2","9":"tag-52","10":"tag-109","11":"tag-110"},"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.shiro8.net\/blog\/wp-json\/wp\/v2\/posts\/583","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.shiro8.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.shiro8.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.shiro8.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.shiro8.net\/blog\/wp-json\/wp\/v2\/comments?post=583"}],"version-history":[{"count":1,"href":"https:\/\/www.shiro8.net\/blog\/wp-json\/wp\/v2\/posts\/583\/revisions"}],"predecessor-version":[{"id":1292,"href":"https:\/\/www.shiro8.net\/blog\/wp-json\/wp\/v2\/posts\/583\/revisions\/1292"}],"wp:attachment":[{"href":"https:\/\/www.shiro8.net\/blog\/wp-json\/wp\/v2\/media?parent=583"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.shiro8.net\/blog\/wp-json\/wp\/v2\/categories?post=583"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.shiro8.net\/blog\/wp-json\/wp\/v2\/tags?post=583"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n\u30aa\u30fc\u30d7\u30f3\u30bd\u30fc\u30b9EC\u30b5\u30a4\u30c8\u30d1\u30c3\u30b1\u30fc\u30b8\u300cECCUB\u300d\u30d0\u30fc\u30b8\u30e7\u30f3\u300c2.12\u7cfb\u300d\u5411\u3051\u306e\u6a5f\u80fd\u30d7\u30e9\u30b0\u30a4\u30f3<\/p>\n
\n\u300c\u30ab\u30c6\u30b4\u30ea\u6bce(\u5546\u54c1\u4e00\u89a7\u30da\u30fc\u30b8)\u30d5\u30ea\u30fc\u30a8\u30ea\u30a2\u8ffd\u52a0\u300d\u30d7\u30e9\u30b0\u30a4\u30f3
\n\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u3092\u4ee5\u4e0b\u306b\u793a\u3057\u307e\u3059\u306e\u3067\u3001\u4ee5\u4e0b\u306e\u4fee\u6b63\u30d7\u30ed\u30b0\u30e9\u30e0\u3092\u9069\u7528\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n
\n\u88fd\u54c1\u540d\u79f0\uff1a\u300c\u30ab\u30c6\u30b4\u30ea\u6bce(\u5546\u54c1\u4e00\u89a7\u30da\u30fc\u30b8)\u30d5\u30ea\u30fc\u30a8\u30ea\u30a2\u8ffd\u52a0\u300d\u30d7\u30e9\u30b0\u30a4\u30f3
\n\u8a72\u5f53\u30d0\u30fc\u30b8\u30e7\u30f3\uff1a1.0<\/p>\n
\n2.\u30d8\u30c3\u30c0\u30fc\u30e1\u30cb\u30e5\u30fc\u306e\u30aa\u30fc\u30ca\u30fc\u30ba\u30b9\u30c8\u30a2\uff1e\u30d7\u30e9\u30b0\u30a4\u30f3\u7ba1\u7406\uff1e\u30d7\u30e9\u30b0\u30a4\u30f3\u7ba1\u7406\u3092\u958b\u304d\u307e\u3059\u3002
\n3.ECCUBE\u3067\u3054\u5229\u7528\u306b\u306a\u3063\u3066\u3044\u308b\u30d7\u30e9\u30b0\u30a4\u30f3\u4e00\u89a7\u8868\u793a\u306e\u5f53\u8a72\u30d7\u30e9\u30b0\u30a4\u30f3\u540d\u79f0\u306e\u5f8c\u308d\u306b\u8a18\u8f09\u3055\u308c\u3066\u3044\u308b\u756a\u53f7\u304c\u30d0\u30fc\u30b8\u30e7\u30f3\u756a\u53f7\u3067\u3059\u3002
\n4.\u30d0\u30fc\u30b8\u30e7\u30f3\u756a\u53f7\u304c\u300c1.0\u300d\u3068\u306a\u3063\u3066\u3044\u308b\u5834\u5408\u306f\u5f53\u8a72\u3001\u8106\u5f31\u6027\u304c\u5b58\u5728\u3059\u308b\u30d7\u30e9\u30b0\u30a4\u30f3\u3067\u3059\u306e\u3067\u3001\u901f\u3084\u304b\u306b\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u9802\u304d\u307e\u3059\u3088\u3046\u5b9c\u3057\u304f\u304a\u9858\u3044\u7533\u3057\u4e0a\u3052\u307e\u3059\u3002
\n\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u5f8c\u306f\u30d0\u30fc\u30b8\u30e7\u30f3\u756a\u53f7\u306e\u8868\u793a\u304c\u300c1.1\u300d\u3068\u306a\u3063\u3066\u3044\u308b\u4e8b\u3092\u78ba\u8a8d\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n
\n1.ECCUBE\u7ba1\u7406\u753b\u9762\u306b\u30ed\u30b0\u30a4\u30f3\u3057\u307e\u3059\u3002
\n2.\u30d8\u30c3\u30c0\u30fc\u30e1\u30cb\u30e5\u30fc\u306e\u30aa\u30fc\u30ca\u30fc\u30ba\u30b9\u30c8\u30a2\uff1e\u30d7\u30e9\u30b0\u30a4\u30f3\u7ba1\u7406\uff1e\u30d7\u30e9\u30b0\u30a4\u30f3\u7ba1\u7406\u3092\u958b\u304d\u307e\u3059\u3002
\n3.ECCUBE\u3067\u3054\u5229\u7528\u306b\u306a\u3063\u3066\u3044\u308b\u30d7\u30e9\u30b0\u30a4\u30f3\u4e00\u89a7\u8868\u793a\u306e\u5f53\u8a72\u30d7\u30e9\u30b0\u30a4\u30f3\u540d\u79f0\u306e\u5f8c\u308d\u306b\u8a18\u8f09\u3055\u308c\u3066\u3044\u308b\u756a\u53f7\u304c\u300c1.0\u300d\u3068\u306a\u3063\u3066\u3044\u308b\u5834\u5408\u306f\u3001\u300c\u30d7\u30e9\u30b0\u30a4\u30f3\u8a2d\u5b9a\u300d\u9805\u76ee\u306e\u300c\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u300d\u306e\u30c6\u30ad\u30b9\u30c8\u30ea\u30f3\u30af\u3092\u30af\u30ea\u30c3\u30af\u3057\u3066\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u5b9f\u65bd\u3057\u3066\u4e0b\u3055\u3044\u3002
\n\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u5b9f\u65bd\u306e\u969b\u306b\u306fECCUBE\u30aa\u30fc\u30ca\u30fc\u30ba\u30b9\u30c8\u30a2\u3078\u306e\u30ed\u30b0\u30a4\u30f3\u304c\u5fc5\u8981\u306b\u306a\u308b\u5834\u5408\u304c\u3042\u308a\u307e\u3059\u306e\u3067\u3001\u753b\u9762\u6848\u5185\u306b\u5f93\u3063\u3066\u30aa\u30fc\u30ca\u30fc\u30ba\u30b9\u30c8\u30a2\u3078\u30ed\u30b0\u30a4\u30f3\u3057\u3066\u304f\u3060\u3055\u3044\u3002
\n4.\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u306e\u5b8c\u4e86\u5f8c\u3001\u30d0\u30fc\u30b8\u30e7\u30f3\u756a\u53f7\u304c\u300c1.1\u300d\u306b\u306a\u3063\u3066\u3044\u308b\u4e8b\u3092\u78ba\u8a8d\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n
\n\u5225\u9014\u914d\u5e03\u4e2d\u306eECUBE\u30d7\u30e9\u30b0\u30a4\u30f3\u300c\u5546\u54c1\u6bce(\u5546\u54c1\u8a73\u7d30\u30da\u30fc\u30b8)\u30d5\u30ea\u30fc\u30a8\u30ea\u30a2\u8ffd\u52a0\u300d\u30d7\u30e9\u30b0\u30a4\u30f3Ver1.0\u306b\u3064\u304d\u307e\u3057\u3066\u3082\u3001\u540c\u69d8\u8106\u5f31\u6027\u304c\u5b58\u5728\u3057\u307e\u3059\u306e\u3067\u3001\u9069\u7528\u3054\u5229\u7528\u4e2d\u306e\u5834\u5408\u901f\u3084\u304b\u306a\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u304a\u9858\u3044\u7533\u3057\u4e0a\u3052\u307e\u3059\u3002<\/p>\n
\n\u914d\u5e03\u30b5\u30a4\u30c8URL:http:\/\/www.ec-cube.net\/products\/detail.php?product_id=506<\/p>\n
\n\u5f0a\u793e\u30ea\u30ea\u30fc\u30b9\u306e\u30d7\u30e9\u30b0\u30a4\u30f3\u306b\u3064\u304d\u307e\u3057\u3066\u3001\u3053\u306e\u554f\u984c\u3092\u3054\u5831\u544a\u3044\u305f\u3060\u304d\u8aa0\u306b\u3042\u308a\u304c\u3068\u3046\u3054\u3056\u3044\u307e\u3057\u305f\u3002
\n\u3053\u306e\u5834\u3092\u304b\u308a\u3066\u304a\u793c\u7533\u3057\u4e0a\u3052\u307e\u3059\u3002
\n\u5c1a\u3001\u4e0d\u5177\u5408\u7b49\u306e\u767a\u751f\u3092\u672a\u7136\u306b\u9632\u3050\u3079\u304f\u3001\u88fd\u54c1\u958b\u767a\u30c6\u30b9\u30c8\u7b49\u5584\u51e6\u3057\u3066\u307e\u3044\u308a\u307e\u3059\u304c\u672a\u77e5\u306e\u4e0d\u5177\u5408\u7b49\u5fa1\u5ea7\u3044\u307e\u3057\u305f\u969b\u306b\u306f\u3054\u6307\u6458\u627f\u308a\u307e\u3059\u3088\u3046\u3001\u4eca\u5f8c\u3068\u3082\u5b9c\u3057\u304f\u304a\u9858\u3044\u7533\u3057\u4e0a\u3052\u307e\u3059\u3002<\/p>\n
\nCross-site scripting vulnerability in the “category_freearea_ addition_plugin ver1.0”<\/p>\n
\nFunction plugin of open source EC site package “ECCUB” version 2.12 system for
\n“category_freearea_ addition_plugin”
\nBe vulnerable to cross-site scripting it exists was found in.
\nIf this vulnerability was being exploited by a malicious third-party attacks, hijacking of the session, such as redirection to an illegal site, there is a risk of being run unauthorized programs.
\nAffected by this problem
\n“category_freearea_ addition_plugin” plugin
\nSince the version shown below, please apply the following fix.<\/p>\n
\nThe affected product is for the following products.
\nProduct Name: “category_freearea_ addition_plugin”
\nversions: 1.0<\/p>\n
\n1.Login to the ECCUBE management screen.<\/p>\n
\nPlease update as soon as possible.
\nAfter the update, please make sure that the display of the version number is “1.1”.<\/p>\n
\nSince the time of the update implementation may be required to log in to ECCUBE owner’s store, please login to the owner’s store according to the screen assistance.<\/p>\n
\nAlso with regard to separate ECUBE plugin “itemdetail_freearea_ addition_plugin” in the distribution plugin Ver1.0, same since the vulnerability exists, would appreciate if rapid updates during application available.<\/p>\n
\nDistribution site URL: http:\/\/www.ec-cube.net\/products\/detail.php?Product_id=506<\/p>\n
\nWith regard to the plugins of our release, Thank you very much for your report this problem.
\nThank you to take this opportunity.
\nIf you find an unknown bug, please let us know.<\/p>\n","protected":false},"excerpt":{"rendered":"