Lucene search
HistorySep 09, 2009 - 5:30 p.m.
CVE-2009-2266
cve-2009-2266
oxid eshop
sensitive information disclosure
remote attackers
session details
order history
6.3 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
OXID eShop 4.x before 4.1.4-21266, 3.x, and 2.x allows remote attackers to obtain sensitive information (session details and order history of other users) via a crafted cookie.
CPE configuration
oxideshopRange≤2.7.0.3enterprise
ORoxideshopRange≤3.0.4.1professional
ORoxideshopMatch4.0.0.0_13895community
ORoxideshopMatch4.0.0.0_13895enterprise
ORoxideshopMatch4.0.0.0_13895professional
ORoxideshopMatch4.0.0.0_13934community
ORoxideshopMatch4.0.0.0_13934enterprise
ORoxideshopMatch4.0.0.0_13934professional
ORoxideshopMatch4.0.0.0_14260community
ORoxideshopMatch4.0.0.0_14260enterprise
ORoxideshopMatch4.0.0.0_14260professional
ORoxideshopMatch4.0.0.1_14455community
ORoxideshopMatch4.0.0.1_14455enterprise
ORoxideshopMatch4.0.0.1_14455professional
ORoxideshopMatch4.0.0.2_14842community
ORoxideshopMatch4.0.0.2_14842enterprise
ORoxideshopMatch4.0.0.2_14842professional
ORoxideshopMatch4.0.0.2_14967community
ORoxideshopMatch4.0.0.2_14967enterprise
ORoxideshopMatch4.0.0.2_14967professional
ORoxideshopMatch4.0.1.0_15990community
ORoxideshopMatch4.0.1.0_15990enterprise
ORoxideshopMatch4.0.1.0_15990professional
ORoxideshopMatch4.1.0-17976community
ORoxideshopMatch4.1.0-17976enterprise
ORoxideshopMatch4.1.0-17976professional
ORoxideshopMatch4.1.1-18442professional
ORoxideshopMatch4.1.2-18998community
ORoxideshopMatch4.1.2-18998enterprise
ORoxideshopMatch4.1.2-18998professional
ORoxideshopMatch4.1.3-19918community
ORoxideshopMatch4.1.3-19918enterprise
ORoxideshopMatch4.1.3-19918professional
Related
cvelist
cvelist
CVE-2009-2266
2022-10-03 16:24:08
openvas
openvas
OXID eShop Community Edition 4.x <= 4.1.3 Unauthorized Access Vulnerability
2009-09-11 00:00:00
OXID eShop Community Edition Unauthorized Access Vulnerability
2009-09-11 00:00:00
prion
prion
Information disclosure
2009-09-09 17:30:00
nvd
nvd
NVD:CVE-2009-2266
2009-09-09 17:30:01
6.3 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
Related for CVE-2009-2266