Os Commerce

Records97All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical7CVSS 9.0–10.0

CVSS high16CVSS 7.0–8.9

Exploited now

Os Commerce records in CISA KEV

No Os Commerce vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Oscommerce 78 records HIGH Online Merchant 9 records LOW Ce Phoenix 1 record LOW Customer Testimonials 1 record LOW Finnish Bank Payment 1 record MEDIUM Luottokunta 1 record MEDIUM Osc2nuke 1 record MEDIUM Php Point Of Sale 1 record LOW

Records

78 records in Oscommerce · all components

TI-2019-15550 CVE-2019-25497 · GHSA-pr7p-x9q9-qph3

osCommerce 2.3.4.1 SQL Injection via currency Parameter

HIGH 77

osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the currency parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00372 Published 2026-02-27 No fix listed CWE-89

TI-2019-15549 CVE-2019-25496 · GHSA-659v-qhqp-595j

osCommerce 2.3.4.1 SQL Injection via products_id Parameter

HIGH 77

osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the products_id parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00372 Published 2026-02-27 No fix listed CWE-89

TI-2019-15548 CVE-2019-25495 · GHSA-xxc3-jv86-6hxx

osCommerce 2.3.4.1 SQL Injection via reviews_id Parameter

HIGH 77

osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the reviews_id parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00372 Published 2026-02-27 No fix listed CWE-89

TI-2023-06030 CVE-2023-6579 · GHSA-qwxv-28w8-65wx

osCommerce POST Parameter shopping-cart sql injection

MEDIUM 63

A vulnerability, which was classified as critical, has been found in osCommerce 4.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.24027 Published 2023-12-07 No fix listed CWE-89

TI-2023-23428 CVE-2023-43723 · GHSA-rqpj-c9xc-64p3

Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

MEDIUM 58

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00455 Published 2023-09-30 No fix listed CWE-79

TI-2023-23427 CVE-2023-43722 · GHSA-x348-whm2-4vq2

Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

MEDIUM 58

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00455 Published 2023-09-30 No fix listed CWE-79

TI-2023-23426 CVE-2023-43721 · GHSA-v9q5-8vv8-6m4c

Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

MEDIUM 58

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00455 Published 2023-09-30 No fix listed CWE-79

TI-2023-23425 CVE-2023-43720 · GHSA-hm4q-7x29-g5cq

Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

MEDIUM 58

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00455 Published 2023-09-30 No fix listed CWE-79

TI-2023-23424 CVE-2023-43719 · GHSA-3f9c-pjpf-jjj3

Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

MEDIUM 58

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00455 Published 2023-09-30 No fix listed CWE-79

TI-2023-23423 CVE-2023-43718 · GHSA-mpxh-9vrg-gqx5

Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

MEDIUM 58

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00455 Published 2023-09-30 No fix listed CWE-79

TI-2023-23422 CVE-2023-43717 · GHSA-g4w4-j7c8-4xwx

Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

MEDIUM 58

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00455 Published 2023-09-30 No fix listed CWE-79

TI-2023-23421 CVE-2023-43716 · GHSA-77m3-f4vw-cv9v

Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

MEDIUM 58

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00455 Published 2023-09-30 No fix listed CWE-79

TI-2023-23420 CVE-2023-43715 · GHSA-23mw-hwq9-w4q8

Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

MEDIUM 58

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00455 Published 2023-09-30 No fix listed CWE-79

TI-2023-23419 CVE-2023-43714 · GHSA-43p3-v3v2-hxcv

Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

MEDIUM 58

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00455 Published 2023-09-30 No fix listed CWE-79

TI-2023-23418 CVE-2023-43713 · GHSA-xv56-c9px-vg88

Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

MEDIUM 58

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability, which allows attackers to inject JS via the "title" parameter, in the "/admin/admin-menu/add-submit" endpoint, which can lead to unautho…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00455 Published 2023-09-30 No fix listed CWE-79

TI-2023-23417 CVE-2023-43712 · GHSA-6vgc-pm79-w2qc

Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

MEDIUM 58

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00459 Published 2023-09-30 No fix listed CWE-79

TI-2023-23416 CVE-2023-43711 · GHSA-hf8h-qrcg-prf5

Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

MEDIUM 58

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00455 Published 2023-09-30 No fix listed CWE-79

TI-2023-23414 CVE-2023-43709 · GHSA-5r5h-899v-rc42

Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

MEDIUM 58

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00455 Published 2023-09-30 No fix listed CWE-79

TI-2023-23413 CVE-2023-43708 · GHSA-g2jc-pj26-76cv

Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

MEDIUM 58

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00455 Published 2023-09-30 No fix listed CWE-79

TI-2023-23412 CVE-2023-43707 · GHSA-8fxx-rqv6-cr7x

Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

MEDIUM 58

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00455 Published 2023-09-30 No fix listed CWE-79

TI-2023-23411 CVE-2023-43706 · GHSA-8vf7-3qv8-h36g

Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

MEDIUM 58

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00455 Published 2023-09-30 No fix listed CWE-79

TI-2023-23410 CVE-2023-43705 · GHSA-j63g-h7j5-m49j

Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

MEDIUM 58

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00455 Published 2023-09-30 No fix listed CWE-79

TI-2023-23409 CVE-2023-43704 · GHSA-hcfh-jx3g-qxw4

Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

MEDIUM 58

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00455 Published 2023-09-30 No fix listed CWE-79

TI-2023-23408 CVE-2023-43703 · GHSA-xcq8-jcwv-xh33

Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

MEDIUM 58

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00455 Published 2023-09-30 No fix listed CWE-79

TI-2023-23407 CVE-2023-43702 · GHSA-f7v4-fm6f-35hv

Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

MEDIUM 58

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00455 Published 2023-09-30 No fix listed CWE-79

Open these records in search →

Critical	7
High	16
Medium	73
Low	1
No CVSS	0