Cross-site request forgery (CSRF) vulnerability in EC-CUBE before 2.11.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
http://www.ec-cube.net/press/detail.php?press_id=114
http://secunia.com/advisories/44487