Vulnerabilities (CVE)

Filtered by vendor Oscommerce Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2006-6534 1 Oscommerce 1 Oscommerce 2008-09-05 4.3 MEDIUM N/A
Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 3.0a3 allow remote attackers to inject arbitrary web script or HTML via the (1) set parameter to admin/modules.php, the (2) selected_box parameter to definitiva/admin/customers.php, the (3) lID parameter to admin/languages_definitions.php, or the (4) pID parameter to admin/products.php.
CVE-2002-1991 1 Oscommerce 1 Oscommerce 2008-09-05 7.5 HIGH N/A
PHP file inclusion vulnerability in osCommerce 2.1 execute arbitrary commands via the include_file parameter to include_once.php.