Skip to content
OpenAdvisories

Vendor

osCommerce

8 known vulnerabilities.

Products

osCommerce 5 osCommerce2 2 Online Merchant 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.3
    CVE-2009-20006 Public exploit

    osCommerce <= 2.2 Admin File Manager Arbitrary PHP Code Execution

    osCommerce versions up to and including 2.2 RC2a contain a vulnerability in its administrative file manager utility (admin/file_manager.php). The interface allows file uploads and edits without sufficient input validation or access control. An unauthenticated…

    osCommerce osCommerce
  • Critical 9.3
    CVE-2018-25114 Public exploit

    osCommerce 2.3.4.1 Installer Unauthenticated Configuration File Injection PHP Code Execution

    A remote code execution vulnerability exists within osCommerce Online Merchant version 2.3.4.1 due to insecure default configuration and missing authentication in the installer workflow. By default, the /install/ directory remains accessible after installatio…

    osCommerce Online Merchant