CVE-2009-3113: Oxid Eshop

Medium severity, CVSS 5.0. EPSS: 0.9% chance of exploitation in the next 30 days.

Unspecified vulnerability in OXID eShop Professional, Enterprise, and Community Edition before 4.1.2, 3.x, and 2.x allows remote attackers to gain write access to product reviews via a crafted parameter.

Affected products

• Oxid Eshop: up to and including 2.7.0.3; up to and including 3.0.4.1; version 4.0.0.0_13895 only; version 4.0.0.0_13934 only; version 4.0.0.0_14260 only; version 4.0.0.1_14455 only; …

Published 2009-09-09. Last modified 2026-06-16.