[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fBUZd4V8zKgjvhWMnf6-7NPCJBhGZ3mRIJYs7dY36Umo":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":55,"kevVulnerabilities":114,"topProductsByCves":115,"seoMetadata":125,"meta":134},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":54},23305,"oscommerce",9,89,0,81,"2023-12-08","o",[16,20,26,31,34,38,42,46,50],{"id":17,"product_name":8,"version_count":18,"cve_count":19,"kev_count":11,"last_cve_update":13},125055,56,77,{"id":21,"product_name":22,"version_count":23,"cve_count":24,"kev_count":11,"last_cve_update":25},125053,"online_merchant",19,10,"2018-11-06",{"id":27,"product_name":28,"version_count":11,"cve_count":29,"kev_count":11,"last_cve_update":30},125051,"finnish_bank_payment",1,"2009-06-12",{"id":32,"product_name":33,"version_count":29,"cve_count":29,"kev_count":11,"last_cve_update":30},125052,"luottokunta",{"id":35,"product_name":36,"version_count":29,"cve_count":29,"kev_count":11,"last_cve_update":37},125054,"osc2nuke","2004-06-01",{"id":39,"product_name":40,"version_count":29,"cve_count":29,"kev_count":11,"last_cve_update":41},125056,"php_point_of_sale","2007-03-16",{"id":43,"product_name":44,"version_count":29,"cve_count":29,"kev_count":11,"last_cve_update":45},125049,"ce_phoenix","2020-09-03",{"id":47,"product_name":48,"version_count":29,"cve_count":29,"kev_count":11,"last_cve_update":49},125057,"poll_booth","2008-10-28",{"id":51,"product_name":52,"version_count":29,"cve_count":29,"kev_count":11,"last_cve_update":53},125050,"customer_testimonials","2008-02-12","Oscommerce is a technology vendor with 9 tracked products and 89 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[56,65,72,79,84,89,95,100,105,110],{"cveId":57,"description":58,"publishedDate":59,"cvssScore":60,"cvssVersion":61,"severity":62,"isKev":63,"epssScore":64},"CVE-2023-6579","A vulnerability, which was classified as critical, has been found in osCommerce 4. Affected by this issue is some unknown functionality of the file \u002Fb2b-supermarket\u002Fshopping-cart of the component POST Parameter Handler. The manipulation of the argument estimate[country_id] leads to sql injection. The attack may be launched remotely. The identifier of this vulnerability is VDB-247160. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.","2023-12-07",9.8,"v3.1","Critical",false,0.24027,{"cveId":66,"description":67,"publishedDate":37,"cvssScore":68,"cvssVersion":69,"severity":70,"isKev":63,"epssScore":71},"CVE-2004-2044","PHP-Nuke 7.3, and other products that use the PHP-Nuke codebase such as the Nuke Cops betaNC PHP-Nuke Bundle, OSCNukeLite 3.1, and OSC2Nuke 7x do not properly use the eregi() PHP function with $_SERVER['PHP_SELF'] to identify the calling script, which allows remote attackers to directly access scripts, obtain path information via a PHP error message, and possibly gain access, as demonstrated using an HTTP request that contains the \"admin.php\" string.",7.5,"v2","High",0.11047,{"cveId":73,"description":74,"publishedDate":75,"cvssScore":76,"cvssVersion":69,"severity":77,"isKev":63,"epssScore":78},"CVE-2005-2330","Directory traversal vulnerability in extras\u002Fupdate.php in osCommerce 2.2 allows remote attackers to read arbitrary files via (1) .. sequences or (2) a full pathname in the readme_file parameter.","2005-07-20",5,"Medium",0.096,{"cveId":80,"description":81,"publishedDate":82,"cvssScore":68,"cvssVersion":69,"severity":70,"isKev":63,"epssScore":83},"CVE-2002-1991","PHP file inclusion vulnerability in osCommerce 2.1 execute arbitrary commands via the include_file parameter to include_once.php.","2002-12-31",0.07456,{"cveId":85,"description":86,"publishedDate":87,"cvssScore":60,"cvssVersion":61,"severity":62,"isKev":63,"epssScore":88},"CVE-2020-27976","osCommerce Phoenix CE before 1.0.5.4 allows OS command injection remotely. Within admin\u002Fmail.php, a from POST parameter can be passed to the application. This affects the PHP mail function, and the sendmail -f option.","2020-10-28",0.07172,{"cveId":90,"description":91,"publishedDate":92,"cvssScore":93,"cvssVersion":69,"severity":77,"isKev":63,"epssScore":94},"CVE-2006-5190","Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers to inject arbitrary web script or HTML via the (1) page parameter in the (a) banner_manager.php, (b) banner_statistics.php, (c) countries.php, (d) currencies.php, (e) languages.php, (f) manufacturers.php, (g) newsletters.php, (h) orders_status.php, (i) products_attributes.php, (j) products_expected.php, (k) reviews.php, (l) specials.php, (m) stats_products_purchased.php, (n) stats_products_viewed.php, (o) tax_classes.php, (p) tax_rates.php, or (q) zones.php scripts in \u002Fadmin, and the (2) zpage parameter in (r) admin\u002Fgeo_zones.php.","2006-10-10",4.3,0.07046,{"cveId":96,"description":97,"publishedDate":98,"cvssScore":76,"cvssVersion":69,"severity":77,"isKev":63,"epssScore":99},"CVE-2004-2021","Directory traversal vulnerability in file_manager.php in osCommerce 2.2 allows remote attackers to view arbitrary files via a .. (dot dot) in the filename argument.","2004-12-31",0.03797,{"cveId":101,"description":102,"publishedDate":103,"cvssScore":93,"cvssVersion":69,"severity":77,"isKev":63,"epssScore":104},"CVE-2012-1059","Cross-site scripting (XSS) vulnerability in osCommerce\u002FOM\u002FCore\u002FSite\u002FShop\u002FApplication\u002FCart\u002Fpages\u002Fmain.php in OSCommerce Online Merchant 3.0.2 allows remote attackers to inject arbitrary web script or HTML via the value_title parameter, as demonstrated using the \"Front\" field in the shirt module.","2012-02-14",0.03406,{"cveId":106,"description":107,"publishedDate":108,"cvssScore":93,"cvssVersion":69,"severity":77,"isKev":63,"epssScore":109},"CVE-2003-1219","Cross-site scripting (XSS) vulnerability in the tep_href_link function in html_output.php for osCommerce before 2.2-MS3 allows remote attackers to inject arbitrary web script or HTML via the osCsid parameter.","2003-12-31",0.03316,{"cveId":111,"description":112,"publishedDate":53,"cvssScore":68,"cvssVersion":69,"severity":70,"isKev":63,"epssScore":113},"CVE-2008-0719","SQL injection vulnerability in customer_testimonials.php in the Customer Testimonials 3 and 3.1 Addon for osCommerce Online Merchant 2.2 allows remote attackers to execute arbitrary SQL commands via the testimonial_id parameter.",0.02883,[],[116,117,118,119,120,121,122,123,124],{"id":17,"product_name":8,"version_count":18,"cve_count":19,"kev_count":11,"last_cve_update":13},{"id":21,"product_name":22,"version_count":23,"cve_count":24,"kev_count":11,"last_cve_update":25},{"id":27,"product_name":28,"version_count":11,"cve_count":29,"kev_count":11,"last_cve_update":30},{"id":32,"product_name":33,"version_count":29,"cve_count":29,"kev_count":11,"last_cve_update":30},{"id":35,"product_name":36,"version_count":29,"cve_count":29,"kev_count":11,"last_cve_update":37},{"id":39,"product_name":40,"version_count":29,"cve_count":29,"kev_count":11,"last_cve_update":41},{"id":43,"product_name":44,"version_count":29,"cve_count":29,"kev_count":11,"last_cve_update":45},{"id":47,"product_name":48,"version_count":29,"cve_count":29,"kev_count":11,"last_cve_update":49},{"id":51,"product_name":52,"version_count":29,"cve_count":29,"kev_count":11,"last_cve_update":53},{"title":126,"metaDescription":127,"keywords":128,"structuredData":129},"Oscommerce - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Oscommerce covering 9 products with 89 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Oscommerce vulnerabilities, Oscommerce security, Oscommerce CVE, Oscommerce threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":130,"@type":131,"name":132,"description":127,"url":133},"https:\u002F\u002Fschema.org","Organization","Oscommerce","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foscommerce",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":135,"apiVersion":136},"2026-10-18T22:14:45.352Z","3.0"]