Skip to content
OpenAdvisories

Vendor

osCommerce

8 known vulnerabilities.

Products

osCommerce 5 osCommerce2 2 Online Merchant 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.2
    CVE-2019-25497

    osCommerce 2.3.4.1 SQL Injection via currency Parameter

    osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the currency parameter. Attackers can send GET requests to shopping_cart.php with malicious currency v…

    osCommerce osCommerce
  • High 8.2
    CVE-2019-25496

    osCommerce 2.3.4.1 SQL Injection via products_id Parameter

    osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the products_id parameter. Attackers can modify the products_id value in product_info.php requests and…

    osCommerce osCommerce
  • High 8.2
    CVE-2019-25495

    osCommerce 2.3.4.1 SQL Injection via reviews_id Parameter

    osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the reviews_id parameter. Attackers can send GET requests to product_reviews_write.php with malicious …

    osCommerce osCommerce