CVE-2009-3113

2009-09-0919:00:00

mitre

www.cve.org

vulnerability

oxid eshop

product reviews

remote attackers

AI Score

6.8

Confidence

Low

EPSS

0.002

Percentile

53.4%

JSON

Unspecified vulnerability in OXID eShop Professional, Enterprise, and Community Edition before 4.1.2, 3.x, and 2.x allows remote attackers to gain write access to product reviews via a crafted parameter.

References

www.oxidforge.org/wiki/Security_bulletins/2009-002