Hi everybody,
today, we published Security Bulletin 2010-006:
http://wiki.oxidforge.org/Security_bulletins/2010-006
All partners and support contract owners have already been informed.
The issue has been resolved in OXID eShop version 4.4.4. If you cannot update for any reason, please fix it ASAP in your installation according to the Resolution section of the Security Bulletin.
Regards