Security EC-CUBE 2.12.6 Server-Side Request Forgery October 24, 2016 007admin EC-CUBE version 2.12.6 suffers from a server-side request forgery vulnerability.