oscommerce oscommerce 2.2 ms2 vulnerabilities and exploits

(subscribe to this query)

Multiple HTTP Response Splitting vulnerabilities in osCommerce 2.2 Milestone 2 and previous versions allow remote malicious users to spoof web content and poison web caches via hex-encoded CRLF ("%0d%0a") sequences in the (1) products_id or (2) pid parameter to index.ph...

Oscommerce Oscommerce 2.2 Ms1 Oscommerce Oscommerce 2.2 Ms2 Oscommerce Oscommerce 2.2 Cvs Oscommerce Oscommerce 2.1

1 EDB exploit

Directory traversal vulnerability in file_manager.php in osCommerce 2.2 allows remote malicious users to view arbitrary files via a .. (dot dot) in the filename argument.

Oscommerce Oscommerce 2.2 Ms3 Oscommerce Oscommerce 2.2 Ms1 Oscommerce Oscommerce 2.2 Ms2 Oscommerce Oscommerce 2.2 Cvs Oscommerce Oscommerce 2.1

1 EDB exploit

Directory traversal vulnerability in extras/update.php in osCommerce 2.2 allows remote malicious users to read arbitrary files via (1) .. sequences or (2) a full pathname in the readme_file parameter.

Oscommerce Oscommerce 2.2 Ms2

1 EDB exploit

Cross-site scripting (XSS) vulnerability in contact_us.php in osCommerce 2.2-MS2 allows remote malicious users to inject arbitrary web script or HTML via the enquiry parameter.

Oscommerce Oscommerce 2.2 Ms2

Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote malicious users to inject arbitrary web script or HTML via the (1) page parameter in the (a) banner_manager.php, (b) banner_statistics.php, (c) countries.php, (d) currenci...

Oscommerce Oscommerce 2.2 Ms3 Oscommerce Oscommerce Oscommerce Oscommerce 2.2 Ms1 Oscommerce Oscommerce 1.11 Oscommerce Oscommerce 2.2 Ms2 Oscommerce Oscommerce 1.5.1 Oscommerce Oscommerce 1.12 Oscommerce Oscommerce 2.2 Cvs Oscommerce Oscommerce 2.1 Oscommerce Oscommerce 1.1 Oscommerce Oscommerce 1.13

17 EDB exploits

SQL injection vulnerability in shopping_cart.php in osCommerce prior to 2.2 Milestone 2 060817 allows remote malicious users to execute arbitrary SQL commands via id array parameters.

Oscommerce Oscommerce 2.2 Ms2 2006-08-17

Multiple directory traversal vulnerabilities in cache.php in osCommerce prior to 2.2 Milestone 2 060817 allow remote malicious users to determine existence of arbitrary files and disclose the installation path via a .. (dot dot) in unspecified parameters in the (1) tep_cache_also...

Oscommerce Oscommerce 2.2 Ms2 2006-08-17

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook