CVE-2024-56526
An issue was discovered in OXID eShop before 7. CMS pages in combination with Smarty may display user information if a CMS page contains a Smarty syntax error.
- Update to 6.14.4
Published Updated
PatchFirst · Latest vulnerabilities
oxid-esales/oxideshop-ce vulnerabilities
Vulnerabilities published for oxid-esales/oxideshop-ce in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 2
CVE-2015-6926
The OpenID Single Sign-On authentication functionality in OXID eShop before 4.5.0 allows remote attackers to impersonate users via the email address in a crafted authentication token.
- Update to 4.5.0
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.