OS
Product
osCommerce
79
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 6Medium 42Low 0
Watch
Add osCommerce to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-22724 | 6.6 | Mar 21 | An issue was discovered in osCommerce v4, allows local attackers to bypass file upload restrictions and execute arbitrary code via administrator profile photo upload feature Affected: 4.0 |
| CVE-2023-6609 | 6.1 | Dec 8 | A vulnerability was found in osCommerce 4 Affected: 4.0 |
| CVE-2023-6296 | 6.1 | Nov 26 | A vulnerability was found in osCommerce 4 Affected: 4.0 |
| CVE-2022-35212 | 6.1 | Aug 18 | osCommerce2 before v2.3.4.1 was discovered to contain a cross-site scripting (XSS) vulnerability via the function tep_db_error() Affected: before 2.3.4.1 |
| CVE-2023-5112 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-5111 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43735 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43734 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43733 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43732 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43731 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43730 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43729 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43728 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43727 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43726 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43725 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43724 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43723 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43722 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43721 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43720 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43719 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43718 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43717 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43716 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43715 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43714 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43713 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability, which allows attackers to inject JS via the "title" parameter, in the… Affected: 4.12.56860 |
| CVE-2023-43712 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43711 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43710 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43709 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43708 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43707 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43706 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43705 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43704 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43703 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2023-43702 | 5.4 | Sep 30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability Affected: 4.12.56860 |
| CVE-2020-29070 | 4.8 | Nov 25 | osCommerce 2.3.4.1 has XSS vulnerability via the authenticated user entering the XSS payload into the title section of newsletters Affected: 2.3.4.1 |
| CVE-2026-18592 | 4.7 | Aug 3 | osCommerce Email Template Configuration EmailController.php EmailController sql injection Affected: 4.14.63493 |
Showing 42