Oscommerce vulnerabilities

Products

• Oscommerce 82
• Online Merchant 9
• Ce Phoenix 3
• Oscommerce2 2

Newest

• oscommerce oscommerce2 osCommerce osCommerce2 Newsletter Management newsletters.php include code injection CVE-2026-105226 5.1 MediumOctober 5, 2026
• oscommerce oscommerce2 osCommerce osCommerce2 Payment payment.php include code injection CVE-2026-105225 4.8 MediumOctober 5, 2026
• oscommerce osCommerce Email Template Configuration EmailController.php EmailController sql injection CVE-2026-18592 5.1 MediumAugust 3, 2026
• oscommerce osCommerce 2.3.4.1 SQL Injection via currency Parameter CVE-2019-25497 8.8 HighFebruary 27, 2026
• oscommerce osCommerce 2.3.4.1 SQL Injection via products_id Parameter CVE-2019-25496 8.8 HighFebruary 27, 2026
• oscommerce osCommerce 2.3.4.1 SQL Injection via reviews_id Parameter CVE-2019-25495 8.8 HighFebruary 27, 2026
• oscommerce osCommerce <= 2.2 Admin File Manager Arbitrary PHP Code Execution CVE-2009-20006 Public exploit 9.3 CriticalSeptember 16, 2025
• oscommerce online merchant osCommerce 2.3.4.1 Installer Unauthenticated Configuration File Injection PHP Code Execution CVE-2018-25114 Public exploit 9.3 CriticalJuly 23, 2025
• oscommerce Reflected Cross-Site Scripting (XSS) in osCommerce CVE-2025-40674 5.1 MediumJune 17, 2025
• oscommerce osCommerce all-products cross site scripting CVE-2024-4348 4.3 MediumApril 30, 2024
• oscommerce An issue was discovered in osCommerce v4, allows local attackers to bypass file upload... CVE-2024-22724 6.6 MediumMarch 21, 2024
• oscommerce ce phoenix HTML Injection vulnerability in CE Phoenix v1.0.8.20 and before allows a remote attacker to... CVE-2024-26521 Public exploit 4.8 MediumMarch 12, 2024
• oscommerce ce phoenix, phoenixcart ce phoenix cart +1 more A remote code execution (RCE) vulnerability in /admin/define_language.php of CE Phoenix v1.0.8.20... CVE-2024-25415 EPSS 27.2% 7.2 HighFebruary 16, 2024
• oscommerce osCommerce all-products cross site scripting CVE-2023-6609 3.5 LowDecember 8, 2023
• oscommerce osCommerce POST Parameter shopping-cart sql injection CVE-2023-6579 EPSS 24.0% 7.3 HighDecember 7, 2023
• oscommerce osCommerce Instant Message compare cross site scripting CVE-2023-6296 4.3 MediumNovember 26, 2023
• os commerce commerce, oscommerce +1 more Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) CVE-2023-5112 5.4 MediumSeptember 30, 2023
• os commerce commerce, oscommerce +1 more Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) CVE-2023-5111 5.4 MediumSeptember 30, 2023
• os commerce commerce, oscommerce +1 more Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) CVE-2023-43735 5.4 MediumSeptember 30, 2023
• os commerce commerce, oscommerce +1 more Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) CVE-2023-43734 5.4 MediumSeptember 30, 2023
• os commerce commerce, oscommerce +1 more Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) CVE-2023-43733 5.4 MediumSeptember 30, 2023
• os commerce commerce, oscommerce +1 more Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) CVE-2023-43732 5.4 MediumSeptember 30, 2023
• os commerce commerce, oscommerce +1 more Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) CVE-2023-43731 5.4 MediumSeptember 30, 2023
• os commerce commerce, oscommerce +1 more Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) CVE-2023-43730 5.4 MediumSeptember 30, 2023
• os commerce commerce, oscommerce +1 more Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) CVE-2023-43729 5.4 MediumSeptember 30, 2023
• os commerce commerce, oscommerce +1 more Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) CVE-2023-43728 5.4 MediumSeptember 30, 2023
• os commerce commerce, oscommerce +1 more Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) CVE-2023-43727 5.4 MediumSeptember 30, 2023
• os commerce commerce, oscommerce +1 more Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) CVE-2023-43726 5.4 MediumSeptember 30, 2023
• os commerce commerce, oscommerce +1 more Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) CVE-2023-43725 5.4 MediumSeptember 30, 2023
• os commerce commerce, oscommerce +1 more Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) CVE-2023-43724 5.4 MediumSeptember 30, 2023
• os commerce commerce, oscommerce +1 more Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) CVE-2023-43723 5.4 MediumSeptember 30, 2023
• os commerce commerce, oscommerce +1 more Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) CVE-2023-43722 5.4 MediumSeptember 30, 2023
• os commerce commerce, oscommerce +1 more Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) CVE-2023-43721 5.4 MediumSeptember 30, 2023
• os commerce commerce, oscommerce +1 more Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) CVE-2023-43720 5.4 MediumSeptember 30, 2023
• os commerce commerce, oscommerce +1 more Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) CVE-2023-43719 5.4 MediumSeptember 30, 2023
• os commerce commerce, oscommerce +1 more Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) CVE-2023-43718 5.4 MediumSeptember 30, 2023
• os commerce commerce, oscommerce +1 more Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) CVE-2023-43717 5.4 MediumSeptember 30, 2023
• os commerce commerce, oscommerce +1 more Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) CVE-2023-43716 5.4 MediumSeptember 30, 2023
• os commerce commerce, oscommerce +1 more Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) CVE-2023-43715 5.4 MediumSeptember 30, 2023
• os commerce commerce, oscommerce +1 more Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) CVE-2023-43714 5.4 MediumSeptember 30, 2023
• os commerce commerce, oscommerce +1 more Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) CVE-2023-43713 5.4 MediumSeptember 30, 2023
• os commerce commerce, oscommerce +1 more Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) CVE-2023-43712 5.4 MediumSeptember 30, 2023
• os commerce commerce, oscommerce +1 more Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) CVE-2023-43711 5.4 MediumSeptember 30, 2023
• os commerce commerce, oscommerce +1 more Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) CVE-2023-43710 5.4 MediumSeptember 30, 2023
• os commerce commerce, oscommerce +1 more Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) CVE-2023-43709 5.4 MediumSeptember 30, 2023
• os commerce commerce, oscommerce +1 more Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) CVE-2023-43708 5.4 MediumSeptember 30, 2023
• os commerce commerce, oscommerce +1 more Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) CVE-2023-43707 5.4 MediumSeptember 30, 2023
• os commerce commerce, oscommerce +1 more Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) CVE-2023-43706 5.4 MediumSeptember 30, 2023
• os commerce commerce, oscommerce +1 more Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) CVE-2023-43705 5.4 MediumSeptember 30, 2023
• os commerce commerce, oscommerce +1 more Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS) CVE-2023-43704 5.4 MediumSeptember 30, 2023
• Show olderLoading…