Skip to contentOscommerce vulnerabilities
Newest
- os commerce commerce, oscommerce +1 moreOs Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)CVE-2023-437035.4 Medium
- os commerce commerce, oscommerce +1 moreOs Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)CVE-2023-437025.4 Medium
- oscommerceosCommerce2 before v2.3.4.1 was discovered to contain a cross-site scripting (XSS) vulnerability...CVE-2022-352126.1 Medium
- oscommerceoscommerce v2.3.4.1 has a functional problem in user registration and password rechecking, where...CVE-2020-233609.8 Critical
- oscommerceosCommerce 2.3.4.1 has XSS vulnerability via the authenticated user entering the XSS payload into...CVE-2020-29070Public exploit4.8 Medium
- oscommerceosCommerce Phoenix CE before 1.0.5.4 allows admin/define_language.php CSRF.CVE-2020-279758.8 High
- oscommerceosCommerce Phoenix CE before 1.0.5.4 allows OS command injection remotely. Within admin/mail.php,...CVE-2020-27976Public exploit9.8 Critical
- oscommerce ce phoenixSeveral XSS vulnerabilities in osCommerce CE Phoenix before 1.0.6.0 allow an attacker to inject...CVE-2020-120586.1 Medium
- oscommerceosCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the "product" page....CVE-2018-185737.2 High
- oscommerceosCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the "product" page....CVE-2018-185727.2 High
- oscommerce online merchantosCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the "product" page....CVE-2018-189664.9 Medium
- oscommerce online merchantosCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the "product" page....CVE-2018-189654.9 Medium
- oscommerce online merchantosCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the "product" page....CVE-2018-189644.9 Medium
- oscommerceDirectory traversal vulnerability in osCommerce Japanese 2.2ms1j-R8 and earlier allows remote...CVE-2015-29654.0 Medium
- oscommerce online merchantSQL injection vulnerability in the update_zone function in catalog/admin/geo_zones.php in...CVE-2014-10033Public exploit6.5 Medium
- oscommerce, paypal payflow pro express checkout +1 moreThe PayPal Pro PayFlow EC module in osCommerce does not verify that the server hostname matches a...CVE-2012-57985.8 Medium
- brian burton paypal pro payflow module, oscommerce +1 moreThe PayPal Pro PayFlow module in osCommerce does not verify that the server hostname matches a...CVE-2012-57975.8 Medium
- oscommerce, paypal pro +1 moreThe PayPal Pro module in osCommerce does not verify that the server hostname matches a domain...CVE-2012-57965.8 Medium
- akunamachata paypal express module, oscommerce +1 moreThe PayPal Express module in osCommerce does not verify that the server hostname matches a domain...CVE-2012-57955.8 Medium
- moneybookers, oscommerce +1 moreThe MoneyBookers module in osCommerce does not verify that the server hostname matches a domain...CVE-2012-57945.8 Medium
- harald ponce de leon authorize.net, oscommerce +1 moreThe Authorize.Net module in osCommerce does not verify that the server hostname matches a domain...CVE-2012-57935.8 Medium
- oscommerce, sagepay sage pay direct module +1 moreThe Sage Pay Direct module in osCommerce does not verify that the server hostname matches a...CVE-2012-57925.8 Medium
- oscommerce online merchant, paypal website payments standard module +1 moreThe PayPal (aka MODULE_PAYMENT_PAYPAL_STANDARD) module before 1.1 in osCommerce Online Merchant...CVE-2012-29915.0 Medium
- oscommerce online merchantCross-site scripting (XSS) vulnerability in osCommerce/OM/Core/Site/Shop/Application/Checkout...CVE-2012-29354.3 Medium
- oscommerce online merchantCross-site scripting (XSS) vulnerability in osCommerce/OM/Core/Site/Setup/Application/Install/RPC...CVE-2012-17922.6 Low
- oscommerce online merchantCross-site scripting (XSS) vulnerability in osCommerce/OM/Core/Site/Shop/Application/Cart/pages...CVE-2012-1059Public exploit4.3 Medium
- oscommerce online merchant, oscommerce +1 moreCross-site scripting (XSS) vulnerability in osCommerce 2.2MS1J before R9, and osCommerce Online...CVE-2012-03124.3 Medium
- oscommerceCross-site scripting (XSS) vulnerability in osCommerce 2.2MS1J before R9 allows remote attackers...CVE-2012-03114.3 Medium
- oscommerceMultiple directory traversal vulnerabilities in osCommerce 3.0.2 allow remote attackers to...CVE-2011-45437.5 High
- oscommerceosCommerce 3.0a5 allows remote attackers to obtain sensitive information via a direct request to...CVE-2011-37675.0 Medium
- oscommerce luottokuntaUnspecified vulnerability in the Luottokunta module before 1.3 for osCommerce has unknown impact...CVE-2009-203910.0 High
- oscommerce finnish bank paymentUnspecified vulnerability in the Finnish Bank Payment module 2.2 for osCommerce has unknown...CVE-2009-203810.0 High
- oscommerceCross-site request forgery (CSRF) vulnerability in osCommerce 2.2 RC 2a allows remote attackers...CVE-2009-04086.0 Medium
- oscommerce poll boothSQL injection vulnerability in pollBooth.php in osCommerce Poll Booth Add-On 2.0 allows remote...CVE-2008-4765Public exploit7.5 High
- oscommercecreate_account.php in osCommerce 2.2 RC 2a allows remote attackers to obtain sensitive...CVE-2008-41705.0 Medium
- oscommerce customer testimonials, oscommerce +1 moreSQL injection vulnerability in customer_testimonials.php in the Customer Testimonials 3 and 3.1...CVE-2008-0719Public exploit7.5 High
- oscommerce php point of sale** DISPUTED ** Directory traversal vulnerability in index.php in PHP Point Of Sale for...CVE-2007-1477Disputed7.5 High
- oscommerceMultiple cross-site scripting (XSS) vulnerabilities in osCommerce 3.0a3 allow remote attackers to...CVE-2006-65344.3 Medium
- oscommerceDirectory traversal vulnerability in admin/templates_boxes_layout.php in osCommerce 3.0a3 allows...CVE-2006-65337.5 High
- oscommerceMultiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817...CVE-2006-5190Public exploit4.3 Medium
- oscommerceMultiple directory traversal vulnerabilities in cache.php in osCommerce before 2.2 Milestone 2...CVE-2006-42985.0 Medium
- oscommerceSQL injection vulnerability in shopping_cart.php in osCommerce before 2.2 Milestone 2 060817...CVE-2006-42977.5 High
- oscommerceDirectory traversal vulnerability in extras/update.php in osCommerce 2.2 allows remote attackers...CVE-2005-2330Public exploit5.0 Medium
- oscommerceMultiple HTTP Response Splitting vulnerabilities in osCommerce 2.2 Milestone 2 and earlier allow...CVE-2005-1951Public exploit5.0 Medium
- oscommerceCross-site scripting (XSS) vulnerability in contact_us.php in osCommerce 2.2-MS2 allows remote...CVE-2005-04584.3 Medium
- oscommerceThe Admin Access With Levels plugin in osCommerce 1.5.1 allows remote attackers to access files...CVE-2004-26387.5 High
- oscommerceDirectory traversal vulnerability in file_manager.php in osCommerce 2.2 allows remote attackers...CVE-2004-2021Public exploit5.0 Medium
- francisco burzi php-nuke, oscommerce osc2nuke, paul laudanski betanc php-nuke +1 more +3 morePHP-Nuke 7.3, and other products that use the PHP-Nuke codebase such as the Nuke Cops betaNC PHP...CVE-2004-2044Public exploitEPSS 11.0%7.5 High
- oscommerceCross-site scripting (XSS) vulnerability in the tep_href_link function in html_output.php for...CVE-2003-1219Public exploit4.3 Medium
- oscommercePHP remote file inclusion vulnerability in include_once.php in osCommerce (a.k.a. Exchange...CVE-2002-2019Public exploit7.5 High
- Show moreLoading…