CVE-2023-38330: Unrestricted Upload of File with Dangerous Type

OXID eShop Enterprise Edition 6.5.0 – 6.5.2 before 6.5.3 allows uploading files with modified headers in the administration area. An attacker can upload a file with a modified header to create a HTTP Response Splitting attack...

CVE-2018-5763: Improper Input Validation

An issue was discovered in OXID eShop Enterprise Edition before 5.3.7 and 6.x before 6.0.1. By entering specially crafted URLs, an attacker is able to bring the shop server to a standstill and hence, it stops working. This is only valid if OXID High Performance Option is activated and Varnish is...

PT-2018-17134

Name of the Vulnerable Software and Affected Versions: OXID eShop Enterprise Edition versions prior to 5.3.7 OXID eShop Enterprise Edition versions 6.x prior to 6.0.1 Description: An issue allows an attacker to bring the shop server to a standstill by entering specially crafted URLs. This issue i...

CVE-2014-2016: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in OXID eShop Professional and Community Edition 4.6.8 and earlier, 4.7.x before 4.7.11, and 4.8.x before 4.8.4, and Enterprise Edition 4.6.8 and earlier, 5.0.x before 5.0.11 and 5.1.x before 5.1.4 allow remote attackers to inject arbitrary web...

OXID eShop Enterprise Edition Cross Site Scripting / Session Fixation

--------------------------------------------- OXID eShop Enterprise Edition - Session Fixation Vulnerability - Stored Cross Site Scripting Vulnerability Date: 30.03.2010 --------------------------------------------- - Description OXID eShop EE is a widespread and popular CMS for online shops. The...