CVE-2014-2016: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in OXID eShop Professional and Community Edition 4.6.8 and earlier, 4.7.x before 4.7.11, and 4.8.x before 4.8.4, and Enterprise Edition 4.6.8 and earlier, 5.0.x before 5.0.11 and 5.1.x before 5.1.4 allow remote attackers to inject arbitrary web...

OXID eShop Community Edition Unauthorized Write Access Vulnerability

This host is installed with OXID eShop Community Edition and is prone to unauthorized access vulnerability. OpenVAS Vulnerability Test $Id: secpodoxideshopunauthwritevuln.nasl 5122 2017-01-27 12:16:00Z teissa $ OXID eShop Community Edition Unauthorized Write Access Vulnerability Authors: Nikita M...

OXID eShop Community Edition Privilege Escalation Vulnerability

This host is installed with OXID eShop Community Edition and is prone to Privilege Escalation vulnerability. OpenVAS Vulnerability Test $Id: secpodoxideshopprivescalationvuln.nasl 5122 2017-01-27 12:16:00Z teissa $ OXID eShop Community Edition Privilege Escalation Vulnerability Authors: Nikita MR...

OXID eShop Community Edition 4.x < 4.1.0 Privilege Escalation Vulnerability

OXID eShop Community Edition is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2009-3113: Undefined Security Weakness

Unspecified vulnerability in OXID eShop Professional, Enterprise, and Community Edition before 4.1.2, 3.x, and 2.x allows remote attackers to gain write access to product reviews via a crafted parameter...

CVE-2009-3112: Undefined Security Weakness

Unspecified vulnerability in OXID eShop Professional, Enterprise, and Community Edition before 4.1.0 allows remote attackers to gain administrator privileges and access the shop backend via a crafted parameter...