CVE-2009-3112: Oxidforge Oxid Eshop

High severity, CVSS 10.0. EPSS: 2% chance of exploitation in the next 30 days.

Unspecified vulnerability in OXID eShop Professional, Enterprise, and Community Edition before 4.1.0 allows remote attackers to gain administrator privileges and access the shop backend via a crafted parameter.

Affected products

• Oxidforge Oxid Eshop: version 4.0.0.0_13895 only; version 4.0.0.0_13934 only; version 4.0.0.0_14260 only; version 4.0.0.1_14455 only; version 4.0.0.2_14842 only; version 4.0.0.2_14967 only; …
• Oxidforge Oxid ESHOP4.0.0.2 14967: any version

Published 2009-09-09. Last modified 2026-06-16.