AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2016-5072

HIGH · CVSS 8.8 EPSS 1.92%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2017-04-10 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 8.8. It may be remotely exploitable.

CVE
CVE-2016-5072
Severity
HIGH
CVSS
8.8
EPSS
1.92%

Original NVD Description

OXID eShop before 2016-06-13 allows remote attackers to execute arbitrary code via a GET or POST request to the oxuser class. Fixed versions are Enterprise Edition v5.1.12, Enterprise Edition v5.2.9, Professional Edition v4.8.12, Professional Edition v4.9.9, Community Edition v4.8.12, Community Edition v4.9.9.

Related CVEs

Other vulnerabilities affecting the same vendor(s)