Priority HIGH 77
osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the currency parameter.
CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.00372 · Published 2026-02-27 · No fix listed CWE-89
Priority HIGH 77
osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the products_id parameter.
CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.00372 · Published 2026-02-27 · No fix listed CWE-89
Priority HIGH 77
osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the reviews_id parameter.
CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.00372 · Published 2026-02-27 · No fix listed CWE-89
Priority LOW 31
An issue was discovered in osCommerce v4, allows local attackers to bypass file upload restrictions and execute arbitrary code via administrator profile photo upload feature.
CVSS 3.1MEDIUM 6.6· Local · Low privileges · No interaction · EPSS 0.00306 · Published 2024-03-21 · No fix listed CWE-94
Priority LOW 27
A vulnerability was found in osCommerce 4.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00411 · Published 2023-12-08 · No fix listed CWE-79
Priority MEDIUM 63
A vulnerability, which was classified as critical, has been found in osCommerce 4.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.24027 · Published 2023-12-07 · No fix listed CWE-89
Priority LOW 29
A vulnerability was found in osCommerce 4.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00805 · Published 2023-11-26 · No fix listed CWE-79
Priority LOW 27
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00455 · Published 2023-09-30 · No fix listed CWE-79
Priority LOW 27
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00455 · Published 2023-09-30 · No fix listed CWE-79
Priority LOW 27
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00455 · Published 2023-09-30 · No fix listed CWE-79
Priority LOW 27
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00455 · Published 2023-09-30 · No fix listed CWE-79
Priority LOW 27
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00455 · Published 2023-09-30 · No fix listed CWE-79
Priority LOW 27
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00455 · Published 2023-09-30 · No fix listed CWE-79
Priority LOW 27
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00455 · Published 2023-09-30 · No fix listed CWE-79
Priority LOW 27
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00455 · Published 2023-09-30 · No fix listed CWE-79
Priority LOW 27
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00455 · Published 2023-09-30 · No fix listed CWE-79
Priority LOW 27
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00455 · Published 2023-09-30 · No fix listed CWE-79
Priority LOW 27
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00455 · Published 2023-09-30 · No fix listed CWE-79
Priority LOW 27
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00455 · Published 2023-09-30 · No fix listed CWE-79
Priority LOW 27
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00455 · Published 2023-09-30 · No fix listed CWE-79
Priority LOW 27
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00455 · Published 2023-09-30 · No fix listed CWE-79
Priority MEDIUM 58
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00455 · Published 2023-09-30 · No fix listed CWE-79
Priority MEDIUM 58
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00455 · Published 2023-09-30 · No fix listed CWE-79
Priority MEDIUM 58
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00455 · Published 2023-09-30 · No fix listed CWE-79
Priority MEDIUM 58
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00455 · Published 2023-09-30 · No fix listed CWE-79
Load more
THREATIST.IORead the docs