Every CVESearch/Get API key

CVE-2009-3113

Unspecified vulnerability in OXID eShop Professional, Enterprise, and Community Edition before 4...

5.0 Medium

Unspecified vulnerability in OXID eShop Professional, Enterprise, and Community Edition before 4.1.2, 3.x, and 2.x allows remote attackers to gain write access to product reviews via a crafted parameter.

Exploit likelihood

0.95%Down 0.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used5.0

Unspecified vulnerability in OXID eShop Professional, Enterprise, and Community Edition before 4.1.2, 3.x, and 2.x allows remote attackers to gain write access to product reviews via a crafted parameter.

Record
CVE-2009-3113
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:P/A:N
Updated
2026-11-02
CVE ListNo score

Unspecified vulnerability in OXID eShop Professional, Enterprise, and Community Edition before 4.1.2, 3.x, and 2.x allows remote attackers to gain write access to product reviews via a crafted parameter.

Record
CVE-2009-3113
Updated
2026-11-02
EUVDEUVD-2009-3096No score

Unspecified vulnerability in OXID eShop Professional, Enterprise, and Community Edition before 4.1.2, 3.x, and 2.x allows remote attackers to gain write access to product reviews via a crafted parameter.

Record
EUVD-2009-3096
Updated
2026-11-03
GitHub AdvisoriesGHSA-4rff-c4p8-c56pNo score

Unspecified vulnerability in OXID eShop Professional, Enterprise, and Community Edition before 4...

Unspecified vulnerability in OXID eShop Professional, Enterprise, and Community Edition before 4.1.2, 3.x, and 2.x allows remote attackers to gain write access to product reviews via a crafted parameter.

Record
GHSA-4rff-c4p8-c56p
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2009-3113 is a medium vulnerability (CVSS 5.0) in Oxid Eshop, published September 9, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.95%, the 61st percentile. No source names a fixed version.

References

MoveEnter Open