← Back

Eshop

eshop

Vendor: Oxid • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2009-3113
1Oxid
1Eshop
Apr 23, 2026
Sep 9, 2009
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Unspecified vulnerability in OXID eShop Professional, Enterprise, and Community Edition before 4.1.2, 3.x, and 2.x allows remote attackers to gain write access to product reviews via a crafted parameter.
CVE-2009-2266
1Oxid
1Eshop
Apr 23, 2026
Sep 9, 2009
N/A· v4
N/A· v3
5.0 MEDIUM· v2
OXID eShop 4.x before 4.1.4-21266, 3.x, and 2.x allows remote attackers to obtain sensitive information (session details and order history of other users) via a crafted cookie.