CyberSec.Space Logo
Back to CVE Browser

CVE-2009-3112

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.1290%
EPSS Percentile24.66th
PublishedSep 9, 2009
Last ModifiedApr 23, 2026

Vulnerability Description

Unspecified vulnerability in OXID eShop Professional, Enterprise, and Community Edition before 4.1.0 allows remote attackers to gain administrator privileges and access the shop backend via a crafted parameter.

Affected Platforms (CPE)

📦
Oxidforge

Oxid Eshop

= 4.0.0.0_13895
📦
Oxidforge

Oxid Eshop

= 4.0.0.0_13895
📦
Oxidforge

Oxid Eshop

= 4.0.0.0_13895
📦
Oxidforge

Oxid Eshop

= 4.0.0.0_13934
📦
Oxidforge

Oxid Eshop

= 4.0.0.0_13934
📦
Oxidforge

Oxid Eshop

= 4.0.0.0_13934
📦
Oxidforge

Oxid Eshop

= 4.0.0.0_14260
📦
Oxidforge

Oxid Eshop

= 4.0.0.0_14260
📦
Oxidforge

Oxid Eshop

= 4.0.0.0_14260
📦
Oxidforge

Oxid Eshop

= 4.0.0.1_14455
📦
Oxidforge

Oxid Eshop

= 4.0.0.1_14455
📦
Oxidforge

Oxid Eshop

= 4.0.0.1_14455
📦
Oxidforge

Oxid Eshop

= 4.0.0.2_14842
📦
Oxidforge

Oxid Eshop

= 4.0.0.2_14842
📦
Oxidforge

Oxid Eshop

= 4.0.0.2_14842
📦
Oxidforge

Oxid Eshop

= 4.0.0.2_14967
📦
Oxidforge

Oxid Eshop

= 4.0.0.2_14967
📦
Oxidforge

Oxid Eshop

= 4.0.1.0_15990
📦
Oxidforge

Oxid Eshop

= 4.0.1.0_15990
📦
Oxidforge

Oxid Eshop

= 44.0.1.0_15990
📦
Oxidforge

Oxid Eshop4.0.0.2 14967

All versions

References & Advisories

🔗 http://www.oxidforge.org/wiki/Security_bulletins/2009-001
🔗 http://www.oxidforge.org/wiki/Security_bulletins/2009-001

Related Vulnerabilities

CVE-2019-130269.8

OXID eShop 6.0.x before 6.0.5 and 6.1.x before 6.1.4 allows SQL Injection via a crafted URL, leading to full access by an attacker...

CVE-2019-170628.8

An issue was discovered in OXID eShop 6.x before 6.0.6 and 6.1.x before 6.1.5, OXID eShop Enterprise Edition Version 5.2.x-5.3.x, ...

CVE-2016-50728.8

OXID eShop before 2016-06-13 allows remote attackers to execute arbitrary code via a GET or POST request to the oxuser class. Fixe...

CVE-2019-252608.2

OXID eShop versions 6.x prior to 6.3.4 contains a SQL injection vulnerability in the 'sorting' parameter that allows attackers to ...