CVE-2016-5072

Published: 2017-04-10T03:59Z

Last Modified: 2024-11-21T02:53Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

OXID eShop before 2016-06-13 allows remote attackers to execute arbitrary code via a GET or POST request to the oxuser class. Fixed versions are Enterprise Edition v5.1.12, Enterprise Edition v5.2.9, Professional Edition v4.8.12, Professional Edition v4.9.9, Community Edition v4.8.12, Community Edition v4.9.9. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt