Cross-site request forgery (CSRF) vulnerability in EC-CUBE before 2.11.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2011-1333
http://www.ec-cube.net/press/detail.php?press_id=114
http://secunia.com/advisories/44487