Design/Logic Flaw

Unspecified vulnerability in OXID eShop Professional, Enterprise, and Community Edition before 4.1.2, 3.x, and 2.x allows remote attackers to gain write access to product reviews via a crafted parameter...

Design/Logic Flaw

Unspecified vulnerability in OXID eShop Professional, Enterprise, and Community Edition before 4.1.0 allows remote attackers to gain administrator privileges and access the shop backend via a crafted parameter...

CVE-2009-3113

Unspecified vulnerability in OXID eShop Professional, Enterprise, and Community Edition before 4.1.2, 3.x, and 2.x allows remote attackers to gain write access to product reviews via a crafted parameter...

CVE-2009-3113

Unspecified vulnerability in OXID eShop Professional, Enterprise, and Community Edition before 4.1.2, 3.x, and 2.x allows remote attackers to gain write access to product reviews via a crafted parameter...

CVE-2009-3112

OXID eShop (Professional, Enterprise, and Community Edition) before 4.1.0 is affected by CVE-2009-3112, a vulnerability that allows remote attackers to gain administrator privileges and access the shop backend via a crafted parameter. The issue is documented across multiple sources (NVD, Red Hat,...

CVE-2009-3113

The CVE-2009-3113 entry describes an unspecified vulnerability in OXID eShop Professional, Enterprise, and Community Edition prior to 4.1.2, 3.x, and 2.x that allows remote attackers to gain write access to product reviews via a crafted parameter. Related connected sources corroborate impact prim...

CVE-2009-3112

Unspecified vulnerability in OXID eShop Professional, Enterprise, and Community Edition before 4.1.0 allows remote attackers to gain administrator privileges and access the shop backend via a crafted parameter...

CVE-2009-2266

OXID eShop 4.x before 4.1.4-21266, 3.x, and 2.x allows remote attackers to obtain sensitive information session details and order history of other users via a crafted cookie...

Information disclosure

OXID eShop 4.x before 4.1.4-21266, 3.x, and 2.x allows remote attackers to obtain sensitive information session details and order history of other users via a crafted cookie...

CVE-2009-2266

OXID eShop 4.x before 4.1.4-21266, 3.x, and 2.x allows remote attackers to obtain sensitive information session details and order history of other users via a crafted cookie...

CVE-2009-2266

OXID eShop (Community/CE) 4.x up to 4.1.3 and earlier 3.x/2.x is affected by CVE-2009-2266: a crafted cookie can disclose sensitive information—session details and other users’ order history. Root cause is an information-disclosure flaw via cookie handling. Impact is partial confidentiality loss ...

CVE-2009-3113: Undefined Security Weakness

Unspecified vulnerability in OXID eShop Professional, Enterprise, and Community Edition before 4.1.2, 3.x, and 2.x allows remote attackers to gain write access to product reviews via a crafted parameter...

CVE-2009-3112: Undefined Security Weakness

Unspecified vulnerability in OXID eShop Professional, Enterprise, and Community Edition before 4.1.0 allows remote attackers to gain administrator privileges and access the shop backend via a crafted parameter...

CVE-2009-2266: Exposure of Sensitive Information to an Unauthorized Actor

OXID eShop 4.x before 4.1.4-21266, 3.x, and 2.x allows remote attackers to obtain sensitive information session details and order history of other users via a crafted cookie...