OS
Product
osCommerce
79
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 6Medium 42Low 0
Watch
Add osCommerce to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-6579 | 9.8 | Dec 7 | A vulnerability, which was classified as critical, has been found in osCommerce 4 Affected: 4.0 |
| CVE-2020-23360 | 9.8 | Jan 27 | oscommerce v2.3.4.1 has a functional problem in user registration and password rechecking, where a non-identical password can bypass the checks in… Affected: 2.3.4.1 |
| CVE-2020-27976 | 9.8 | Oct 28 | osCommerce Phoenix CE before 1.0.5.4 allows OS command injection remotely Affected: before 1.0.5.4 |
| CVE-2020-27975 | 8.8 | Oct 28 | osCommerce Phoenix CE before 1.0.5.4 allows admin/define_language.php CSRF Affected: before 1.0.5.4 |
| CVE-2019-25497 | 7.5 | Feb 27 | osCommerce 2.3.4.1 SQL Injection via currency Parameter Affected: 2.3.4.1 |
| CVE-2019-25496 | 7.5 | Feb 27 | osCommerce 2.3.4.1 SQL Injection via products_id Parameter Affected: 2.3.4.1 |
| CVE-2019-25495 | 7.5 | Feb 27 | osCommerce 2.3.4.1 SQL Injection via reviews_id Parameter Affected: 2.3.4.1 |
| CVE-2018-18573 | 7.2 | Aug 22 | osCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the "product" page Affected: 2.3.4.1 |
| CVE-2018-18572 | 7.2 | Aug 22 | osCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the "product" page Affected: 2.3.4.1 |
| CVE-2024-22724 | 6.6 | Mar 21 | An issue was discovered in osCommerce v4, allows local attackers to bypass file upload restrictions and execute arbitrary code via administrator profile photo upload feature Affected: 4.0 |
| CVE-2023-6609 | 6.1 | Dec 8 | A vulnerability was found in osCommerce 4 Affected: 4.0 |
| CVE-2023-6296 | 6.1 | Nov 26 | A vulnerability was found in osCommerce 4 Affected: 4.0 |
| CVE-2022-35212 | 6.1 | Aug 18 | osCommerce2 before v2.3.4.1 was discovered to contain a cross-site scripting (XSS) vulnerability via the function tep_db_error() Affected: before 2.3.4.1 |
| CVE-2023-5112 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-5111 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43735 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43734 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43733 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43732 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43731 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43730 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43729 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43728 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43727 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43726 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43725 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43724 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43723 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43722 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43721 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43720 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43719 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43718 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43717 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43716 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43715 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43714 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43713 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability, which allows attackers to inject JS via the "title" parameter, in the… Affected: 4.12.56860 |
| CVE-2023-43712 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43711 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43710 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43709 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43708 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43707 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43706 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43705 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43704 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43703 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43702 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2020-29070 | 4.8 | Nov 25 | osCommerce 2.3.4.1 has XSS vulnerability via the authenticated user entering the XSS payload into the title section of newsletters Affected: 2.3.4.1 |