CVE:CVE-2009-3113
CNNVD:CNNVD-200909-150
OXID eShop的多个版本中存在未明漏洞。远程攻击者可以借助一个特制的参数，获得对产品评论的写访问权。
solution:Upgrade oxid eshop to a higher version than 2.7.0.3,3.0.4.1,4.0.0.0_13895,4.0.0.0_13934,4.0.0.0_14260,4.0.0.1_14455,4.0.0.2_14842,4.0.0.2_14967,4.0.1.0_15990,4.1.0-17976,4.1.1-18442,4.1.2-18998,4.1.3-19918,and avoid the version (,2.7.0.3],(,3.0.4.1],4.0.0.0_13895,4.0.0.0_13934,4.0.0.0_14260,4.0.0.1_14455,4.0.0.2_14842,4.0.0.2_14967,4.0.1.0_15990,4.1.0-17976,4.1.1-18442,4.1.2-18998,4.1.3-19918