İçeriğe atla
Noroxi

osCommerce kayıtları

oscommerce üreticisine ait 95 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
11
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 19
  3. 20
  4. 21
  5. 22
  6. 23
  7. 24
  8. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

95 kayıt
  • CVE-2023-6579
    46Planlayın

    osCommerce POST Parameter shopping-cart sql injection

    KritikCVSS 9,8İstismar yokEPSS %24

    oscommerce · oscommerce7 Ara 2023

  • CVE-2020-27976
    41Planlayın

    osCommerce Phoenix CE before 1.0.5.4 allows OS command injection remotely.

    KritikCVSS 9,8Kavram kanıtıEPSS %7

    oscommerce · oscommerce28 Eki 2020

  • CVE-2009-2039
    41Planlayın

    Unspecified vulnerability in the Luottokunta module before 1.3 for osCommerce has unknown impact and attack vectors related to orders.

    KritikCVSS 10,0İstismar yokEPSS %2

    oscommerce · oscommerce12 Haz 2009

  • CVE-2009-2038
    40Planlayın

    Unspecified vulnerability in the Finnish Bank Payment module 2.2 for osCommerce has unknown impact and attack vectors related to bank charge

    KritikCVSS 10,0İstismar yokEPSS %1

    oscommerce · oscommerce12 Haz 2009

  • CVE-2020-23360
    39İzleyin

    oscommerce v2.3.4.1 has a functional problem in user registration and password rechecking, where a non-identical password can bypass the che

    KritikCVSS 9,8İstismar yokEPSS %1

    oscommerce · oscommerce27 Oca 2021

  • CVE-2020-27975
    35İzleyin

    osCommerce Phoenix CE before 1.0.5.4 allows admin/define_language.php CSRF.

    YüksekCVSS 8,8İstismar yokEPSS %1

    oscommerce · oscommerce28 Eki 2020

  • CVE-2019-25497
    35İzleyin

    osCommerce 2.3.4.1 SQL Injection via currency Parameter

    YüksekCVSS 8,8İstismar yokEPSS %0

    oscommerce · oscommerce27 Şub 2026

  • CVE-2019-25496
    35İzleyin

    osCommerce 2.3.4.1 SQL Injection via products_id Parameter

    YüksekCVSS 8,8İstismar yokEPSS %0

    oscommerce · oscommerce27 Şub 2026

  • CVE-2019-25495
    35İzleyin

    osCommerce 2.3.4.1 SQL Injection via reviews_id Parameter

    YüksekCVSS 8,8İstismar yokEPSS %0

    oscommerce · oscommerce27 Şub 2026

  • CVE-2004-2044
    33İzleyin

    PHP-Nuke 7.3, and other products that use the PHP-Nuke codebase such as the Nuke Cops betaNC PHP-Nuke Bundle, OSCNukeLite 3.1, and OSC2Nuke

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    francisco burzi · php-nuke1 Haz 2004

  • CVE-2002-1991
    32İzleyin

    PHP file inclusion vulnerability in osCommerce 2.1 execute arbitrary commands via the include_file parameter to include_once.php.

    YüksekCVSS 7,5Kavram kanıtıEPSS %7

    oscommerce · oscommerce31 Ara 2002

  • CVE-2008-0719
    31İzleyin

    SQL injection vulnerability in customer_testimonials.php in the Customer Testimonials 3 and 3.1 Addon for osCommerce Online Merchant 2.2 all

    YüksekCVSS 7,5Kavram kanıtıEPSS %3

    oscommerce · customer testimonials11 Şub 2008

  • CVE-2002-2019
    31İzleyin

    PHP remote file inclusion vulnerability in include_once.php in osCommerce (a.k.a.

    YüksekCVSS 7,5Kavram kanıtıEPSS %3

    oscommerce · oscommerce31 Ara 2002

  • CVE-2011-4543
    31İzleyin

    Multiple directory traversal vulnerabilities in osCommerce 3.0.2 allow remote attackers to include and execute arbitrary local files via a .

    YüksekCVSS 7,5İstismar yokEPSS %3

    oscommerce · oscommerce5 Ara 2011

  • CVE-2006-6533
    31İzleyin

    Directory traversal vulnerability in admin/templates_boxes_layout.php in osCommerce 3.0a3 allows remote attackers to include and execute arb

    YüksekCVSS 7,5İstismar yokEPSS %2

    oscommerce · oscommerce13 Ara 2006

  • CVE-2004-2638
    30İzleyin

    The Admin Access With Levels plugin in osCommerce 1.5.1 allows remote attackers to access files in the "admin/" directory by modifying the i

    YüksekCVSS 7,5İstismar yokEPSS %2

    oscommerce · oscommerce31 Ara 2004

  • CVE-2006-4297
    30İzleyin

    SQL injection vulnerability in shopping_cart.php in osCommerce before 2.2 Milestone 2 060817 allows remote attackers to execute arbitrary SQ

    YüksekCVSS 7,5İstismar yokEPSS %1

    oscommerce · oscommerce22 Ağu 2006

  • CVE-2007-1477
    30İzleyin

    Directory traversal vulnerability in index.php in PHP Point Of Sale for osCommerce 1.1 allows remote attackers to include and execute arbitr

    YüksekCVSS 7,5İstismar yokEPSS %1

    oscommerce · php point of sale16 Mar 2007

  • CVE-2005-4677
    30İzleyin

    SQL injection vulnerability in additional_images.php (aka the Additional Images module) before 1.14 in osCommerce allows remote attackers to

    YüksekCVSS 7,5İstismar yokEPSS %1

    oscommerce · oscommerce31 Ara 2005

  • CVE-2008-4765
    30İzleyin

    SQL injection vulnerability in pollBooth.php in osCommerce Poll Booth Add-On 2.0 allows remote attackers to execute arbitrary SQL commands v

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    oscommerce · poll booth27 Eki 2008

  • CVE-2018-18573
    29İzleyin

    osCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the "product" page.

    YüksekCVSS 7,2İstismar yokEPSS %3

    oscommerce · oscommerce22 Ağu 2019

  • CVE-2018-18572
    29İzleyin

    osCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the "product" page.

    YüksekCVSS 7,2İstismar yokEPSS %3

    oscommerce · oscommerce22 Ağu 2019

  • CVE-2014-10033
    27İzleyin

    SQL injection vulnerability in the update_zone function in catalog/admin/geo_zones.php in osCommerce Online Merchant 2.3.3.4 and earlier all

    OrtaCVSS 6,5Kavram kanıtıEPSS %2

    oscommerce · online merchant13 Oca 2015

  • CVE-2024-22724
    26İzleyin

    An issue was discovered in osCommerce v4, allows local attackers to bypass file upload restrictions and execute arbitrary code via administr

    OrtaCVSS 6,6İstismar yokEPSS %0

    oscommerce · oscommerce21 Mar 2024

  • CVE-2020-12058
    24İzleyin

    Several XSS vulnerabilities in osCommerce CE Phoenix before 1.0.6.0 allow an attacker to inject and execute arbitrary JavaScript code.

    OrtaCVSS 6,1İstismar yokEPSS %1

    oscommerce · ce phoenix3 Eyl 2020