osCommerce osCommerce vulnerabilities
5 published CVEs name osCommerce osCommerce among the affected products.
- 5Published CVEs5 of them scored
- 3Last 12 monthspublished in the last year
- 1Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2019-25497
osCommerce 2.3.4.1 SQL Injection via currency Parameter
Oscommerce · osCommerce
High8.8 - CVE-2019-25496
osCommerce 2.3.4.1 SQL Injection via products_id Parameter
Oscommerce · osCommerce
High8.8 - CVE-2019-25495
osCommerce 2.3.4.1 SQL Injection via reviews_id Parameter
Oscommerce · osCommerce
High8.8 - CVE-2009-20006
osCommerce <= 2.2 Admin File Manager Arbitrary PHP Code Execution
osCommerce · osCommerce
Critical9.3 - CVE-2025-40674
Reflected Cross-Site Scripting (XSS) in osCommerce
osCommerce · osCommerce
Medium5.1