CVE-2016-5072

8.8 highEPSS 1.9%

High (8.8) in oxidforge oxid eshop. EPSS 1.9% chance of exploitation in the next 30 days.

OXID eShop before 2016-06-13 allows remote attackers to execute arbitrary code via a GET or POST request to the oxuser class. Fixed versions are Enterprise Edition v5.1.12, Enterprise Edition v5.2.9, Professional Edition v4.8.12, Professional Edition v4.9.9, Community Edition v4.8.12, Community Edition v4.9.9.

Severity

CVSS 3.0

8.8 high

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.9% chance of exploitation in the next 30 days; higher than 79% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2017-04-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

oxidforge:oxid_eshop

References

https://oxidforge.org/en/security-bulletin-2016-001.html
https://oxidforge.org/en/security-bulletin-2016-001.html

Check your stack JSON