Skip to content
OpenAdvisories

Product · Os Commerce

osCommerce

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2009-20006 Public exploit

    osCommerce <= 2.2 Admin File Manager Arbitrary PHP Code Execution

    osCommerce versions up to and including 2.2 RC2a contain a vulnerability in its administrative file manager utility (admin/file_manager.php). The interface allows file uploads and edits without sufficient input validation or access control. An unauthenticated…

    Os Commerce osCommerce