Read the docs

Oxidforge

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Oxidforge records in CISA KEV

No Oxidforge vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Oxid Eshop 3 records MEDIUM Eshop 1 record LOW Oxid Eshop4.0.0.2 14967 1 record MEDIUM

Records

4 records

TI-2016-04389 CVE-2016-5072 · GHSA-6r7w-whmg-2357

Code injection in OXID eShop before 2016-06-13

Priority MEDIUM 42

OXID eShop before 2016-06-13 allows remote attackers to execute arbitrary code via a GET or POST request to the oxuser class.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01916 Published 2017-04-10 No fix listed CWE-94
TI-2014-01581 CVE-2014-2017 · GHSA-hr5v-c6v7-wv78

CRLF injection vulnerability in OXID eShop Professional Edition before 4.7.11 and 4.8.x…

Priority LOW 32

CRLF injection vulnerability in OXID eShop Professional Edition before 4.7.11 and 4.8.x before 4.8.4, Enterprise Edition before 5.0.11 and 5.1.x before 5.1.4, and Community Edition before 4.7.11 and 4.8.x before 4.8.4 al…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.02403 Published 2018-01-18 No fix listed CWE-93
Open these records in search →