CVE Catalog
CVE-2017-8110
CriticalSummary
The eCommerce Shopsoftware version 2.0.2.2 rev 10690 contains an XXE vulnerability in the api/it-recht-kanzlei/api-it-recht-kanzlei.php file.
Risk Assessment
Exploitation of this vulnerability may lead to the disclosure of sensitive data or attacks on the organization's internal systems.
Recommendation
It is recommended to update the software to the latest version that addresses this vulnerability.
Original NVD description (English source)
www.modified-shop.org modified eCommerce Shopsoftware 2.0.2.2 rev 10690 has XXE in api/it-recht-kanzlei/api-it-recht-kanzlei.php.