Cross-site request forgery (CSRF) vulnerability in osCommerce 2.2 RC 2a allows remote malicious users to hijack the authentication of administrators.
oscommerce oscommerce 2.2