CVE-2009-3113

The CVE-2009-3113 entry describes an unspecified vulnerability in OXID eShop Professional, Enterprise, and Community Edition prior to 4.1.2, 3.x, and 2.x that allows remote attackers to gain write access to product reviews via a crafted parameter. Related connected sources corroborate impact prim...

CVE-2009-2266

OXID eShop (Community/CE) 4.x up to 4.1.3 and earlier 3.x/2.x is affected by CVE-2009-2266: a crafted cookie can disclose sensitive information—session details and other users’ order history. Root cause is an information-disclosure flaw via cookie handling. Impact is partial confidentiality loss ...