CVE-2018-14020

An issue was discovered in the Paymorrow module 1.0.0 before 1.0.2 and 2.0.0 before 2.0.1 for OXID eShop. An attacker can bypass delivery-address change detection if the payment module doesn't use eShop's checkout procedure properly. To do so, the attacker must change the delivery address to one that is not verified by the Paymorrow module.

• https://bugs.oxid-esales.com/view.php?id=6801Vendor Advisory
• https://oxidforge.org/en/security-bulletin-2018-003.htmlVendor Advisory
• https://bugs.oxid-esales.com/view.php?id=6801Vendor Advisory
• https://oxidforge.org/en/security-bulletin-2018-003.htmlVendor Advisory

Published

Aug 20, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-14012WolfSight CMS 3.2 allows SQL injection via the PATH_INFO to …
• CVE-2018-14013Synacor Zimbra Collaboration Suite Collaboration before 8.8.…
• CVE-2018-14014In waimai Super Cms 20150505, there is a CSRF vulnerability …
• CVE-2018-14015The sdb_set_internal function in sdb.c in radare2 2.7.0 allo…5.5
• CVE-2018-14016The r_bin_mdmp_init_directory_entry function in mdmp.c in ra…5.5
• CVE-2018-14017The r_bin_java_annotation_new function in shlr/java/class.c …5.5
• CVE-2018-14023Open Whisper Signal (aka Signal-Desktop) before 1.15.0-beta.…
• CVE-2018-14027Digisol Wireless Wifi Home Router HR-3300 allows XSS via the…
• CVE-2018-14028In WordPress 4.9.7, plugins uploaded via the admin area are …
• CVE-2018-14029CSRF vulnerability in admin/user/edit in Creatiwity wityCMS …
• CVE-2018-1403IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 …5.4
• CVE-2018-14031An issue was discovered in the HDF HDF5 1.8.20 library. Ther…