Vulnerability in Oxid Eshop

CVE-2009-3113

Unspecified vulnerability in OXID eShop Professional, Enterprise, and Community Edition before 4.1.2, 3.x, and 2.x allows remote attackers to gain write access to product reviews via a crafted parameter.

EPSS: 0.009 (57.6th percentile) — read the EPSS interpretation.

Affected products

  • Oxid Eshop — versions 4.0.0.0_13895, 4.0.0.0_13934, 4.0.0.0_14260
  • N/a — versions n/a

References