High severity8.8NVD Advisory· Published Apr 10, 2017· Updated May 13, 2026
CVE-2016-5072
CVE-2016-5072
Description
OXID eShop before 2016-06-13 allows remote attackers to execute arbitrary code via a GET or POST request to the oxuser class. Fixed versions are Enterprise Edition v5.1.12, Enterprise Edition v5.2.9, Professional Edition v4.8.12, Professional Edition v4.9.9, Community Edition v4.8.12, Community Edition v4.9.9.
Affected products
3cpe:2.3:a:oxidforge:oxid_eshop:*:*:*:*:community:*:*:*+ 2 more
- cpe:2.3:a:oxidforge:oxid_eshop:*:*:*:*:community:*:*:*range: <=4.9.8
- cpe:2.3:a:oxidforge:oxid_eshop:*:*:*:*:enterprise:*:*:*range: <=5.2.8
- cpe:2.3:a:oxidforge:oxid_eshop:*:*:*:*:professional:*:*:*range: <=4.9.8
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- oxidforge.org/en/security-bulletin-2016-001.htmlnvdMitigationPatchVendor Advisory
News mentions
0No linked articles in our index yet.