CVE-2009-3113

Published: Sep 9, 2009Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Unspecified vulnerability in OXID eShop Professional, Enterprise, and Community Edition before 4.1.2, 3.x, and 2.x allows remote attackers to gain write access to product reviews via a crafted parameter.

Affected (33)

Products: Oxid: Eshop

Oxid

1 product

Eshop

Configuration A

33 vulnerable

Vulnerable Software	Affected Versions
Oxid Eshop	Up to 2.7.0.3
Oxid Eshop	Up to 3.0.4.1
Oxid Eshop	Version 4.0.0.0_13895
Oxid Eshop	Version 4.0.0.0_13895
Oxid Eshop	Version 4.0.0.0_13895
Oxid Eshop	Version 4.0.0.0_13934
Oxid Eshop	Version 4.0.0.0_13934
Oxid Eshop	Version 4.0.0.0_13934
Oxid Eshop	Version 4.0.0.0_14260
Oxid Eshop	Version 4.0.0.0_14260
Oxid Eshop	Version 4.0.0.0_14260
Oxid Eshop	Version 4.0.0.1_14455
Oxid Eshop	Version 4.0.0.1_14455
Oxid Eshop	Version 4.0.0.1_14455
Oxid Eshop	Version 4.0.0.2_14842
Oxid Eshop	Version 4.0.0.2_14842
Oxid Eshop	Version 4.0.0.2_14842
Oxid Eshop	Version 4.0.0.2_14967
Oxid Eshop	Version 4.0.0.2_14967
Oxid Eshop	Version 4.0.0.2_14967
Oxid Eshop	Version 4.0.1.0_15990
Oxid Eshop	Version 4.0.1.0_15990
Oxid Eshop	Version 4.0.1.0_15990
Oxid Eshop	Version 4.1.0-17976
Oxid Eshop	Version 4.1.0-17976
Oxid Eshop	Version 4.1.0-17976
Oxid Eshop	Version 4.1.1-18442
Oxid Eshop	Version 4.1.2-18998
Oxid Eshop	Version 4.1.2-18998
Oxid Eshop	Version 4.1.2-18998
Oxid Eshop	Version 4.1.3-19918
Oxid Eshop	Version 4.1.3-19918
Oxid Eshop	Version 4.1.3-19918

References (2)

http://www.oxidforge.org/wiki/Security_bulletins/2009-002

Source: cve@mitre.org

Vendor Advisory

http://www.oxidforge.org/wiki/Security_bulletins/2009-002

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.