An issue exists in OXID eShop Enterprise Edition prior to 5.3.8, 6.0.x prior to 6.0.3, and 6.1.x prior to 6.1.0; Professional Edition prior to 4.10.8, 5.x and 6.0.x prior to 6.0.3, and 6.1.x prior to 6.1.0; and Community Edition prior to 4.10.8, 5.x and 6.0.x prior to 6.0.3, and 6.1.x prior to 6.1.0. An attacker could gain access to the admin panel or a customer account when using the password reset function. To do so, it is required to own a domain name similar to the one the victim uses for their e-mail accounts.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
oxid-esales eshop 6.0.2 |
||
oxid-esales eshop 6.0.0 |
||
oxid-esales eshop |
Vulmon