Security EC-CUBE 2.12.6 Server-Side Request Forgery October 24, 2016 007admin Leave a comment EC-CUBE version 2.12.6 suffers from a server-side request forgery vulnerability.