CVE:CVE-2009-3112
CNNVD:CNNVD-200909-149
OXID eShop多个版本中存在未明漏洞。远程攻击者可以借助一个特制的参数，获得管理员特权和访问shop backend。
solution:Upgrade oxidforge oxid_eshop to a higher version than 4.0.0.0_13895,4.0.0.0_13934,4.0.0.0_14260,4.0.0.1_14455,4.0.0.2_14842,4.0.0.2_14967,4.0.1.0_15990,44.0.1.0_15990,and avoid the version 4.0.0.0_13895,4.0.0.0_13934,4.0.0.0_14260,4.0.0.1_14455,4.0.0.2_14842,4.0.0.2_14967,4.0.1.0_15990,44.0.1.0_15990; Upgrade oxidforge oxid_eshop4.0.0.2_14967 to a higher version than *:community_edition,and avoid the version *:community_edition