Lucene search

[email protected]NVD:CVE-2009-3112

HistorySep 09, 2009 - 7:30 p.m.

CVE-2009-3112

2009-09-0919:30:00

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.8

Confidence

Low

EPSS

0.005

Percentile

76.1%

JSON

Unspecified vulnerability in OXID eShop Professional, Enterprise, and Community Edition before 4.1.0 allows remote attackers to gain administrator privileges and access the shop backend via a crafted parameter.

Affected configurations

Nvd

Node

oxidforgeoxid_eshopMatch4.0.0.0_13895community_edition

oxidforgeoxid_eshopMatch4.0.0.0_13895enterprise_edition

oxidforgeoxid_eshopMatch4.0.0.0_13895pro_edition

oxidforgeoxid_eshopMatch4.0.0.0_13934community_edition

oxidforgeoxid_eshopMatch4.0.0.0_13934enterprise_edition

oxidforgeoxid_eshopMatch4.0.0.0_13934pro_edition

oxidforgeoxid_eshopMatch4.0.0.0_14260community_edition

oxidforgeoxid_eshopMatch4.0.0.0_14260enterprise_edition

oxidforgeoxid_eshopMatch4.0.0.0_14260pro_edition

oxidforgeoxid_eshopMatch4.0.0.1_14455community_edition

oxidforgeoxid_eshopMatch4.0.0.1_14455enterprise_edition

oxidforgeoxid_eshopMatch4.0.0.1_14455pro_edition

oxidforgeoxid_eshopMatch4.0.0.2_14842community_edition

oxidforgeoxid_eshopMatch4.0.0.2_14842enterprise_edition

oxidforgeoxid_eshopMatch4.0.0.2_14842pro_edition

oxidforgeoxid_eshopMatch4.0.0.2_14967enterprise_edition

oxidforgeoxid_eshopMatch4.0.0.2_14967pro_edition

oxidforgeoxid_eshopMatch4.0.1.0_15990enterprise_edition

oxidforgeoxid_eshopMatch4.0.1.0_15990pro_edition

oxidforgeoxid_eshopMatch44.0.1.0_15990community_edition

oxidforgeoxid_eshop4.0.0.2_14967community_edition

VendorProductVersionCPE
oxidforgeoxid_eshop4.0.0.0_13895cpe:2.3:a:oxidforge:oxid_eshop:4.0.0.0_13895:*:community_edition:*:*:*:*:*
oxidforgeoxid_eshop4.0.0.0_13895cpe:2.3:a:oxidforge:oxid_eshop:4.0.0.0_13895:*:enterprise_edition:*:*:*:*:*
oxidforgeoxid_eshop4.0.0.0_13895cpe:2.3:a:oxidforge:oxid_eshop:4.0.0.0_13895:*:pro_edition:*:*:*:*:*
oxidforgeoxid_eshop4.0.0.0_13934cpe:2.3:a:oxidforge:oxid_eshop:4.0.0.0_13934:*:community_edition:*:*:*:*:*
oxidforgeoxid_eshop4.0.0.0_13934cpe:2.3:a:oxidforge:oxid_eshop:4.0.0.0_13934:*:enterprise_edition:*:*:*:*:*
oxidforgeoxid_eshop4.0.0.0_13934cpe:2.3:a:oxidforge:oxid_eshop:4.0.0.0_13934:*:pro_edition:*:*:*:*:*
oxidforgeoxid_eshop4.0.0.0_14260cpe:2.3:a:oxidforge:oxid_eshop:4.0.0.0_14260:*:community_edition:*:*:*:*:*
oxidforgeoxid_eshop4.0.0.0_14260cpe:2.3:a:oxidforge:oxid_eshop:4.0.0.0_14260:*:enterprise_edition:*:*:*:*:*
oxidforgeoxid_eshop4.0.0.0_14260cpe:2.3:a:oxidforge:oxid_eshop:4.0.0.0_14260:*:pro_edition:*:*:*:*:*
oxidforgeoxid_eshop4.0.0.1_14455cpe:2.3:a:oxidforge:oxid_eshop:4.0.0.1_14455:*:community_edition:*:*:*:*:*

Vendor	Product	Version	CPE
oxidforge	oxid_eshop	4.0.0.0_13895	cpe:2.3:a:oxidforge:oxid_eshop:4.0.0.0_13895::community_edition:::::
oxidforge	oxid_eshop	4.0.0.0_13895	cpe:2.3:a:oxidforge:oxid_eshop:4.0.0.0_13895::enterprise_edition:::::
oxidforge	oxid_eshop	4.0.0.0_13895	cpe:2.3:a:oxidforge:oxid_eshop:4.0.0.0_13895::pro_edition:::::
oxidforge	oxid_eshop	4.0.0.0_13934	cpe:2.3:a:oxidforge:oxid_eshop:4.0.0.0_13934::community_edition:::::
oxidforge	oxid_eshop	4.0.0.0_13934	cpe:2.3:a:oxidforge:oxid_eshop:4.0.0.0_13934::enterprise_edition:::::
oxidforge	oxid_eshop	4.0.0.0_13934	cpe:2.3:a:oxidforge:oxid_eshop:4.0.0.0_13934::pro_edition:::::
oxidforge	oxid_eshop	4.0.0.0_14260	cpe:2.3:a:oxidforge:oxid_eshop:4.0.0.0_14260::community_edition:::::
oxidforge	oxid_eshop	4.0.0.0_14260	cpe:2.3:a:oxidforge:oxid_eshop:4.0.0.0_14260::enterprise_edition:::::
oxidforge	oxid_eshop	4.0.0.0_14260	cpe:2.3:a:oxidforge:oxid_eshop:4.0.0.0_14260::pro_edition:::::
oxidforge	oxid_eshop	4.0.0.1_14455	cpe:2.3:a:oxidforge:oxid_eshop:4.0.0.1_14455::community_edition:::::