Unspecified vulnerability in OXID eShop Professional, Enterprise, and Community Edition before 4.1.2, 3.x, and 2.x allows remote attackers to gain write access to product reviews via a crafted parameter.
| Software | From | Fixed in |
|---|---|---|
| oxid / eshop | 4.0.0.0_13895 | 4.0.0.0_13895.x |
| oxid / eshop | 4.0.0.0_14260 | 4.0.0.0_14260.x |
| oxid / eshop | 4.0.0.2_14967 | 4.0.0.2_14967.x |
| oxid / eshop | 4.0.1.0_15990 | 4.0.1.0_15990.x |
| oxid / eshop | 4.1.2-18998 | 4.1.2-18998.x |
| oxid / eshop | 4.1.1-18442 | 4.1.1-18442.x |
| oxid / eshop | 4.1.0-17976 | 4.1.0-17976.x |
| oxid / eshop | 4.0.0.2_14842 | 4.0.0.2_14842.x |
| oxid / eshop | 4.0.0.0_13934 | 4.0.0.0_13934.x |
| oxid / eshop | 4.0.0.1_14455 | 4.0.0.1_14455.x |
| oxid / eshop | - | 2.7.0.3.x |
| oxid / eshop | 4.1.3-19918 | 4.1.3-19918.x |
| oxid / eshop | - | 3.0.4.1.x |