osCommerce vulnerabilities
8 published CVEs name osCommerce among the affected products.
- 8Published CVEs8 of them scored
- 5Last 12 monthspublished in the last year
- 2Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-105226
osCommerce osCommerce2 Newsletter Management newsletters.php include code injection
osCommerce · osCommerce2
Medium5.1 - CVE-2026-105225
osCommerce osCommerce2 Payment payment.php include code injection
osCommerce · osCommerce2
Medium4.8 - CVE-2019-25497
osCommerce 2.3.4.1 SQL Injection via currency Parameter
Oscommerce · osCommerce
High8.8 - CVE-2019-25496
osCommerce 2.3.4.1 SQL Injection via products_id Parameter
Oscommerce · osCommerce
High8.8 - CVE-2019-25495
osCommerce 2.3.4.1 SQL Injection via reviews_id Parameter
Oscommerce · osCommerce
High8.8 - CVE-2009-20006
osCommerce <= 2.2 Admin File Manager Arbitrary PHP Code Execution
osCommerce · osCommerce
Critical9.3 - CVE-2018-25114
osCommerce 2.3.4.1 Installer Unauthenticated Configuration File Injection PHP Code Execution
osCommerce · Online Merchant
Critical9.3 - CVE-2025-40674
Reflected Cross-Site Scripting (XSS) in osCommerce
osCommerce · osCommerce
Medium5.1