Vulnerability Description
Unspecified vulnerability in OXID eShop Professional, Enterprise, and Community Edition before 4.1.2, 3.x, and 2.x allows remote attackers to gain write access to product reviews via a crafted parameter.
CVSS Score
5.0
MEDIUM
AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oxid | Eshop | <= 2.7.0.3 |
References
- http://www.oxidforge.org/wiki/Security_bulletins/2009-002Vendor Advisory
- http://www.oxidforge.org/wiki/Security_bulletins/2009-002Vendor Advisory
FAQ
What is CVE-2009-3113?
CVE-2009-3113 is a vulnerability with a CVSS score of 5.0 (MEDIUM). Unspecified vulnerability in OXID eShop Professional, Enterprise, and Community Edition before 4.1.2, 3.x, and 2.x allows remote attackers to gain write access to product reviews via a crafted paramet...
How severe is CVE-2009-3113?
CVE-2009-3113 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2009-3113?
Check the references section above for vendor advisories and patch information. Affected products include: Oxid Eshop.