Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2009-3113
HistorySep 09, 2009 - 7:30 p.m.

CVE-2009-3113

2009-09-0919:30:00
mitre
web.nvd.nist.gov
20
cve-2009-3113
oxid eshop
vulnerability
remote attackers
product reviews

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

7.1

Confidence

Low

EPSS

0.002

Percentile

53.4%

JSON

Unspecified vulnerability in OXID eShop Professional, Enterprise, and Community Edition before 4.1.2, 3.x, and 2.x allows remote attackers to gain write access to product reviews via a crafted parameter.

Affected configurations

Nvd
Node
oxideshopRange≤2.7.0.3enterprise
OR
oxideshopRange≤3.0.4.1professional
OR
oxideshopMatch4.0.0.0_13895community
OR
oxideshopMatch4.0.0.0_13895enterprise
OR
oxideshopMatch4.0.0.0_13895professional
OR
oxideshopMatch4.0.0.0_13934community
OR
oxideshopMatch4.0.0.0_13934enterprise
OR
oxideshopMatch4.0.0.0_13934professional
OR
oxideshopMatch4.0.0.0_14260community
OR
oxideshopMatch4.0.0.0_14260enterprise
OR
oxideshopMatch4.0.0.0_14260professional
OR
oxideshopMatch4.0.0.1_14455community
OR
oxideshopMatch4.0.0.1_14455enterprise
OR
oxideshopMatch4.0.0.1_14455professional
OR
oxideshopMatch4.0.0.2_14842community
OR
oxideshopMatch4.0.0.2_14842enterprise
OR
oxideshopMatch4.0.0.2_14842professional
OR
oxideshopMatch4.0.0.2_14967community
OR
oxideshopMatch4.0.0.2_14967enterprise
OR
oxideshopMatch4.0.0.2_14967professional
OR
oxideshopMatch4.0.1.0_15990community
OR
oxideshopMatch4.0.1.0_15990enterprise
OR
oxideshopMatch4.0.1.0_15990professional
OR
oxideshopMatch4.1.0-17976community
OR
oxideshopMatch4.1.0-17976enterprise
OR
oxideshopMatch4.1.0-17976professional
OR
oxideshopMatch4.1.1-18442professional
OR
oxideshopMatch4.1.2-18998community
OR
oxideshopMatch4.1.2-18998enterprise
OR
oxideshopMatch4.1.2-18998professional
OR
oxideshopMatch4.1.3-19918community
OR
oxideshopMatch4.1.3-19918enterprise
OR
oxideshopMatch4.1.3-19918professional
VendorProductVersionCPE
oxideshop*cpe:2.3:a:oxid:eshop:*:*:enterprise:*:*:*:*:*
oxideshop*cpe:2.3:a:oxid:eshop:*:*:professional:*:*:*:*:*
oxideshop4.0.0.0_13895cpe:2.3:a:oxid:eshop:4.0.0.0_13895:*:community:*:*:*:*:*
oxideshop4.0.0.0_13895cpe:2.3:a:oxid:eshop:4.0.0.0_13895:*:enterprise:*:*:*:*:*
oxideshop4.0.0.0_13895cpe:2.3:a:oxid:eshop:4.0.0.0_13895:*:professional:*:*:*:*:*
oxideshop4.0.0.0_13934cpe:2.3:a:oxid:eshop:4.0.0.0_13934:*:community:*:*:*:*:*
oxideshop4.0.0.0_13934cpe:2.3:a:oxid:eshop:4.0.0.0_13934:*:enterprise:*:*:*:*:*
oxideshop4.0.0.0_13934cpe:2.3:a:oxid:eshop:4.0.0.0_13934:*:professional:*:*:*:*:*
oxideshop4.0.0.0_14260cpe:2.3:a:oxid:eshop:4.0.0.0_14260:*:community:*:*:*:*:*
oxideshop4.0.0.0_14260cpe:2.3:a:oxid:eshop:4.0.0.0_14260:*:enterprise:*:*:*:*:*
Rows per page:
1-10 of 331

Related

nvd 1
openvas 2
prion 1
cvelist 1
nvd
nvd
CVE-2009-3113
2009-09-09 19:30:00
openvas
openvas
OXID eShop Community Edition Unauthorized Write Access Vulnerability
2009-09-11 00:00:00
OXID eShop Community Edition 4.x <= 4.1.1 Unauthorized Write Access Vulnerability
2009-09-11 00:00:00
prion
prion
Design/Logic Flaw
2009-09-09 19:30:00
cvelist
cvelist
CVE-2009-3113
2009-09-09 19:00:00

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

7.1

Confidence

Low

EPSS

0.002

Percentile

53.4%

JSON
Related for CVE-2009-3113
nvd1openvas2prion1cvelist1