Oscommerce vulnerabilitiesNone on the known-exploited list.
Oscommerce has 89 published vulnerabilities across 9 products in our catalogue. None of them is on the list of flaws known to be exploited today. The most affected product is Oscommerce, with 77. If you run Oscommerce software, patch the exploited flaws first.
We keep watching the known-exploited list.
Which Oscommerce products have the most vulnerabilities?
Oscommerce leads with 77 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Oscommerce vulnerabilities are being exploited?
This is the list that matters most: flaws criminals are using now.
None of Oscommerce's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.
Which Oscommerce flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 24%CVE-2023-6579Critical
A vulnerability, which was classified as critical, has been found in osCommerce 4.
- 11%CVE-2004-2044High
PHP-Nuke 7.3, and other products that use the PHP-Nuke codebase such as the Nuke Cops betaNC PHP-Nuke Bundle, OSCNukeLite 3.1, and OSC2Nuke 7x do not properly use the eregi() PHP function with $_SERVER['PHP_SELF'] to...
- 9.6%CVE-2005-2330Medium
Directory traversal vulnerability in extras/update.php in osCommerce 2.2 allows remote attackers to read arbitrary files via (1) ..
- 7.5%CVE-2002-1991High
PHP file inclusion vulnerability in osCommerce 2.1 execute arbitrary commands via the include_file parameter to include_once.php.
- 7.2%CVE-2020-27976Critical
osCommerce Phoenix CE before 1.0.5.4 allows OS command injection remotely.
- 7.0%CVE-2006-5190Medium
Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers to inject arbitrary web script or HTML via the (1) page parameter in the (a) banner_manager.php,...
- 3.8%CVE-2004-2021Medium
Directory traversal vulnerability in file_manager.php in osCommerce 2.2 allows remote attackers to view arbitrary files via a ..
- 3.4%CVE-2012-1059Medium
Cross-site scripting (XSS) vulnerability in osCommerce/OM/Core/Site/Shop/Application/Cart/pages/main.php in OSCommerce Online Merchant 3.0.2 allows remote attackers to inject arbitrary web script or HTML via the...
- 3.3%CVE-2003-1219Medium
Cross-site scripting (XSS) vulnerability in the tep_href_link function in html_output.php for osCommerce before 2.2-MS3 allows remote attackers to inject arbitrary web script or HTML via the osCsid parameter.
- 2.9%CVE-2008-0719High
SQL injection vulnerability in customer_testimonials.php in the Customer Testimonials 3 and 3.1 Addon for osCommerce Online Merchant 2.2 allows remote attackers to execute arbitrary SQL commands via the...
All Oscommerce products we track.
8 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- Oscommerceoscommerce77 vulnerabilities56 versions
- Online Merchantonline_merchant10 vulnerabilities19 versions
- Ce Phoenixce_phoenix1 vulnerability1 version
- Customer Testimonialscustomer_testimonials1 vulnerability1 version
- Luottokuntaluottokunta1 vulnerability1 version
- Osc2nukeosc2nuke1 vulnerability1 version
- PHP Point of Salephp_point_of_sale1 vulnerability1 version
- Poll Boothpoll_booth1 vulnerability1 version
This directory lists the 8 Oscommerce products with at least one tracked version, of 9 in our catalogue.
Running Oscommerce? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 new flaw affects software Acme tracks
A vulnerability, which was classified as critical, has been found in osCommerce 4. Affected by this issue is some unknown functionality of the file /b2b-supermarket/shopping-cart of the component POST Parameter Handler. The manipulation of the argument estimate[country_id] leads to sql injection. The attack may be launched remotely. The identifier of this vulnerability is VDB-247160. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
- Matched to
- Oscommerce on Acme's software list
- What to do
- Plan in the vendor’s update
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 89 published vulnerabilities across 9 products and 81 versions from Oscommerce.
None of Oscommerce's vulnerabilities is on the list of flaws known to be exploited today.
Oscommerce, with 77 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a Precursor Intelligence account and track the Oscommerce products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.