oscommerce Vulnerability Advisory Catalog

Total 88 security vulnerabilities recorded for oscommerce software and firmware.

← Back to All Vendors
Component: oscommerce

osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code t...

📅 2026-02-27
CVSS 8.2 Dossier →
Component: oscommerce

osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code t...

📅 2026-02-27
CVSS 8.2 Dossier →
Component: oscommerce

osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code t...

📅 2026-02-27
CVSS 8.2 Dossier →
Component: oscommerce

An issue was discovered in osCommerce v4, allows local attackers to bypass file upload restrictions and execute arbitrary code via administrator profi...

📅 2024-03-21
CVSS 6.6 Dossier →
Component: oscommerce

A vulnerability was found in osCommerce 4. It has been classified as problematic. This affects an unknown part of the file /b2b-supermarket/catalog/al...

📅 2023-12-08
CVSS 3.5 Dossier →
Component: oscommerce

A vulnerability, which was classified as critical, has been found in osCommerce 4. Affected by this issue is some unknown functionality of the file /b...

📅 2023-12-07
CVSS 7.3 Dossier →
CVE-2023-6296 MEDIUM
Component: oscommerce

A vulnerability was found in osCommerce 4. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /catalog...

📅 2023-11-26
CVSS 4.3 Dossier →
CVE-2023-5112 MEDIUM
Component: oscommerce

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "spec...

📅 2023-09-30
CVSS 5.4 Dossier →
CVE-2023-5111 MEDIUM
Component: oscommerce

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "feat...

📅 2023-09-30
CVSS 5.4 Dossier →
Component: oscommerce

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "form...

📅 2023-09-30
CVSS 5.4 Dossier →
Component: oscommerce

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "name...

📅 2023-09-30
CVSS 5.4 Dossier →
Component: oscommerce

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "comp...

📅 2023-09-30
CVSS 5.4 Dossier →
Component: oscommerce

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "tax_...

📅 2023-09-30
CVSS 5.4 Dossier →
Component: oscommerce

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "zone...

📅 2023-09-30
CVSS 5.4 Dossier →
Component: oscommerce

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "coun...

📅 2023-09-30
CVSS 5.4 Dossier →
Component: oscommerce

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "xsel...

📅 2023-09-30
CVSS 5.4 Dossier →
Component: oscommerce

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "stoc...

📅 2023-09-30
CVSS 5.4 Dossier →
Component: oscommerce

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "stoc...

📅 2023-09-30
CVSS 5.4 Dossier →
Component: oscommerce

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "orde...

📅 2023-09-30
CVSS 5.4 Dossier →
Component: oscommerce

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "orde...

📅 2023-09-30
CVSS 5.4 Dossier →
Component: oscommerce

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "derb...

📅 2023-09-30
CVSS 5.4 Dossier →
Component: oscommerce

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "orde...

📅 2023-09-30
CVSS 5.4 Dossier →
Component: oscommerce

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "orde...

📅 2023-09-30
CVSS 5.4 Dossier →
Component: oscommerce

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "PACK...

📅 2023-09-30
CVSS 5.4 Dossier →
Page 1 of 4 (88 Total Records)