CVE-2016-5072

OXID eShop before 2016-06-13 allows remote attackers to execute arbitrary code via a GET or POST request to the oxuser class

published April 10, 2017

CVSS
—
EPSS
2%
Percentile
79.6
In the wild
Unconfirmed
What it is

OXID eShop before 2016-06-13 allows remote attackers to execute arbitrary code via a GET or POST request to the oxuser class. Fixed versions are Enterprise Edition v5.1.12, Enterprise Edition v5.2.9, Professional Edition v4.8.12, Professional Edition v4.9.9, Community Edition v4.8.12, Community Edition v4.9.9.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01916 · 79.6th percentile
Published
2017-04-10T03:00Z
EPSS history
Timeline
  • 10 APR 03:00Z
    OXID eShop before 2016-06-13 allows remote attackers to execute arbitrary code via a GET or POST request to the oxuser class
    cvelistv5