CVEvulnerability

CVE-2009-3112

10.0 HIGH Published 2009-09-09 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-09-09
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Unspecified vulnerability in OXID eShop Professional, Enterprise, and Community Edition before 4.1.0 allows remote attackers to gain administrator privileges and access the shop backend via a crafted parameter.

Affected configurations

• oxidforge oxid eshop 4.0.0.0 13895 • oxidforge oxid eshop 4.0.0.0 13934 • oxidforge oxid eshop 4.0.0.0 14260 • oxidforge oxid eshop 4.0.0.1 14455 • oxidforge oxid eshop 4.0.0.2 14842 • oxidforge oxid eshop 4.0.0.2 14967 • oxidforge oxid eshop 4.0.1.0 15990 • oxidforge oxid eshop 44.0.1.0 15990 • oxidforge oxid eshop4.0.0.2 14967

References