OXID eSales eshop 6.0.0 Release Candidate 2 Community Edition
Approved changes feed: RSS · Atom
cpe:2.3:a:oxid-esales:eshop:6.0.0:rc2:*:*:community:*:*:*
part: a version: 6.0.0 update: rc2
| Vendor | Oxid Esales (038c365e-81ba-5750-b0b0-ba5887a2a395) |
|---|---|
| Product | Eshop (74ca829b-d386-5eaf-91df-ea9110e07fc0) |
| Edition | * |
| Language | * |
| Software edition | community |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-12579 |
vulnerable | 2026-06-08 05:10:41.781193 |
Details available
An issue was discovered in OXID eShop Enterprise Edition before 5.3.8, 6.0.x before 6.0.3, and 6.1.x before 6.1.0; Professional Edition before 4.10.8, 5.x and 6.0.x before 6.0.3, and 6.1.x before 6.1.0; and Community Edition before 4.10.8, 5.x and 6.0.x before 6.0.3, and 6.1.x before 6.1.0. An attacker could gain access to the admin panel or a customer account when using the password reset function. To do so, it is required to own a domain name similar to the one the victim uses for their e-mail accounts.
Published: 2018-08-20T22:00:00.000Z
Updated: 2024-08-05T08:38:06.330Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-14993 |
vulnerable | 2026-06-08 05:08:57.713232 |
Details available
OXID eShop Community Edition before 6.0.0 RC3 (development), 4.10.x before 4.10.6 (maintenance), and 4.9.x before 4.9.11 (legacy), Enterprise Edition before 6.0.0 RC3 (development), 5.2.x before 5.2.11 (legacy), and 5.3.x before 5.3.6 (maintenance), and Professional Edition before 6.0.0 RC3 (development), 4.9.x before 4.9.11 (legacy) and 4.10.x before 4.10.6 (maintenance) allow remote attackers to crawl specially crafted URLs (aka "forced browsing") in order to overflow the database of the shop and consequently make it stop working. Prerequisite: the shop allows rendering empty categories to the storefront via an admin option.
Published: 2018-02-20T23:00:00.000Z
Updated: 2024-08-05T19:42:22.366Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.