CVE-2015-6926

The OpenID Single Sign-On authentication functionality in OXID eShop before 4.5.0 allows remote attackers to impersonate users via the email address in a crafted authentication token.

• CWE-287

• https://bugs.oxid-esales.com/view.php?id=6224Issue Tracking, Vendor Advisory
• https://oxidforge.org/en/oxid-security-bulletin-2015-001.htmlMitigation, Vendor Advisory
• https://bugs.oxid-esales.com/view.php?id=6224Issue Tracking, Vendor Advisory
• https://oxidforge.org/en/oxid-security-bulletin-2015-001.htmlMitigation, Vendor Advisory

Published

Jan 19, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-6919Cross-site scripting (XSS) vulnerability in the googleSearch…
• CVE-2015-6920Cross-site scripting (XSS) vulnerability in js/window.php in…
• CVE-2015-6921Cross-site scripting (XSS) vulnerability in the Zendesk Feed…
• CVE-2015-6922Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.3…9.8
• CVE-2015-6923The ndvbs module in VBox Communications Satellite Express Pr…
• CVE-2015-6925wolfSSL (formerly CyaSSL) before 3.6.8 allows remote attacke…
• CVE-2015-6927vzctl before 4.9.4 determines the virtual environment (VE) l…
• CVE-2015-6928classes/admin.class.php in CubeCart 5.2.12 through 5.2.16 an…
• CVE-2015-6929Multiple cross-site scripting (XSS) vulnerabilities in Nokia…
• CVE-2015-6931Cross-site scripting (XSS) vulnerability in the vSphere Web …
• CVE-2015-6932VMware vCenter Server 5.5 before u3 and 6.0 before u1 does n…
• CVE-2015-6933The VMware Tools HGFS (aka Shared Folders) implementation in…