Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown

CVE-2009-3113

Disclosure Date: September 09, 2009 (last updated October 04, 2023)
Unspecified vulnerability in OXID eShop Professional, Enterprise, and Community Edition before 4.1.2, 3.x, and 2.x allows remote attackers to gain write access to product reviews via a crafted parameter.
0
Attacker Value
Unknown

CVE-2009-3112

Disclosure Date: September 09, 2009 (last updated October 04, 2023)
Unspecified vulnerability in OXID eShop Professional, Enterprise, and Community Edition before 4.1.0 allows remote attackers to gain administrator privileges and access the shop backend via a crafted parameter.
0
Attacker Value
Unknown

CVE-2009-2266

Disclosure Date: September 09, 2009 (last updated October 04, 2023)
OXID eShop 4.x before 4.1.4-21266, 3.x, and 2.x allows remote attackers to obtain sensitive information (session details and order history of other users) via a crafted cookie.
0