Vulnerability in Oxidforge Oxid Eshop

CVE-2009-3112

Unspecified vulnerability in OXID eShop Professional, Enterprise, and Community Edition before 4.1.0 allows remote attackers to gain administrator privileges and access the shop backend via a crafted parameter.

EPSS: 0.020 (78.6th percentile) — read the EPSS interpretation.

Affected products

Oxidforge Oxid_eshop — versions 4.0.0.0_13895, 4.0.0.0_13934, 4.0.0.0_14260
Oxidforge Oxid_eshop4.0.0.2_14967
N/a — versions n/a

References

cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)