VYPR
← All advisories
High severity8.8NVD Advisory· Published Apr 10, 2017· Updated Jun 17, 2026

CVE-2016-5072

CVE-2016-5072

Description

OXID eShop before 2016-06-13 allows remote attackers to execute arbitrary code via a GET or POST request to the oxuser class. Fixed versions are Enterprise Edition v5.1.12, Enterprise Edition v5.2.9, Professional Edition v4.8.12, Professional Edition v4.9.9, Community Edition v4.8.12, Community Edition v4.9.9.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Oxid/Eshop4 versions
    cpe:2.3:a:oxidforge:oxid_eshop:*:*:*:*:community:*:*:*+ 3 more
    • cpe:2.3:a:oxidforge:oxid_eshop:*:*:*:*:community:*:*:*range: <=4.9.8
    • cpe:2.3:a:oxidforge:oxid_eshop:*:*:*:*:enterprise:*:*:*range: <=5.2.8
    • cpe:2.3:a:oxidforge:oxid_eshop:*:*:*:*:professional:*:*:*range: <=4.9.8
    • (no CPE)range: < 2016-06-13
  • Oxid/OXID eShop Enterprise Editionllm-create
    Range: < v5.1.12, < v5.2.9
  • Oxid/Professional Editionllm-create
    Range: < v4.8.12, < v4.9.9

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.