Oxidforge Oxid Eshop
3 CVEs affecting Oxidforge Oxid Eshop. Latest disclosed: 2023-04-11. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-5072 | High | 8.8 | 2017-04-10 | OXID eShop before 2016-06-13 allows remote attackers to execute arbitrary code via a GET or POST request to the oxuser class. Fixed versions are Enterprise Edi… |
CVE-2023-26260 | Medium | 5.4 | 2023-04-11 | OXID eShop 6.2.x before 6.4.4 and 6.5.x before 6.5.2 allows session hijacking, leading to partial access of a customer's account by an attacker, due to an impr… |
CVE-2009-3112 | | 2009-09-09 | Unspecified vulnerability in OXID eShop Professional, Enterprise, and Community Edition before 4.1.0 allows remote attackers to gain administrator privileges a… |