Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
oscommerce oscommerce vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2006-5190
Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote malicious users to inject arbitrary web script or HTML via the (1) page parameter in the (a) banner_manager.php, (b) banner_statistics.php, (c) countries.php, (d) currenci...
Oscommerce Oscommerce 2.2 Ms3
Oscommerce Oscommerce
Oscommerce Oscommerce 2.2 Ms1
Oscommerce Oscommerce 1.11
Oscommerce Oscommerce 2.2 Ms2
Oscommerce Oscommerce 1.5.1
Oscommerce Oscommerce 1.12
Oscommerce Oscommerce 2.2 Cvs
Oscommerce Oscommerce 2.1
Oscommerce Oscommerce 1.1
Oscommerce Oscommerce 1.13
17 EDB exploits
NA
CVE-2006-4297
SQL injection vulnerability in shopping_cart.php in osCommerce prior to 2.2 Milestone 2 060817 allows remote malicious users to execute arbitrary SQL commands via id array parameters.
Oscommerce Oscommerce 2.2 Ms2 2006-08-17
NA
CVE-2006-4298
Multiple directory traversal vulnerabilities in cache.php in osCommerce prior to 2.2 Milestone 2 060817 allow remote malicious users to determine existence of arbitrary files and disclose the installation path via a .. (dot dot) in unspecified parameters in the (1) tep_cache_also...
Oscommerce Oscommerce 2.2 Ms2 2006-08-17
NA
CVE-2006-0478
CRE Loaded 6.15 allows remote malicious users to perform privileged actions, including uploading and creating arbitrary files, via a direct request to files.php. NOTE: the vendor states "The initial announcement of this risk was made on our website... and it included a patch...
Cre Loaded Cre Loaded 6.15
1 EDB exploit
NA
CVE-2005-4677
SQL injection vulnerability in additional_images.php (aka the Additional Images module) prior to 1.14 in osCommerce allows remote malicious users to execute arbitrary SQL commands via the products_id parameter to product_info.php.
NA
CVE-2005-2330
Directory traversal vulnerability in extras/update.php in osCommerce 2.2 allows remote malicious users to read arbitrary files via (1) .. sequences or (2) a full pathname in the readme_file parameter.
Oscommerce Oscommerce 2.2 Ms2
1 EDB exploit
NA
CVE-2005-1951
Multiple HTTP Response Splitting vulnerabilities in osCommerce 2.2 Milestone 2 and previous versions allow remote malicious users to spoof web content and poison web caches via hex-encoded CRLF ("%0d%0a") sequences in the (1) products_id or (2) pid parameter to index.ph...
Oscommerce Oscommerce 2.2 Ms1
Oscommerce Oscommerce 2.2 Ms2
Oscommerce Oscommerce 2.2 Cvs
Oscommerce Oscommerce 2.1
1 EDB exploit
NA
CVE-2005-0458
Cross-site scripting (XSS) vulnerability in contact_us.php in osCommerce 2.2-MS2 allows remote malicious users to inject arbitrary web script or HTML via the enquiry parameter.
Oscommerce Oscommerce 2.2 Ms2
NA
CVE-2004-2638
The Admin Access With Levels plugin in osCommerce 1.5.1 allows remote malicious users to access files in the "admin/" directory by modifying the in_login parameter to a non-zero value.
Oscommerce Oscommerce 1.5.1
NA
CVE-2004-2021
Directory traversal vulnerability in file_manager.php in osCommerce 2.2 allows remote malicious users to view arbitrary files via a .. (dot dot) in the filename argument.
Oscommerce Oscommerce 2.2 Ms3
Oscommerce Oscommerce 2.2 Ms1
Oscommerce Oscommerce 2.2 Ms2
Oscommerce Oscommerce 2.2 Cvs
Oscommerce Oscommerce 2.1
1 EDB exploit
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
privilege
CVE-2022-48762
CVE-2022-48751
CVE-2024-37079
CVE-2024-30848
LFI
man-in-the-middle
CVE-2022-48736
CVE-2024-30103
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
4
5
6
7
8
9
10
NEXT »