osCommerce vulnerabilities
We track 2 vulnerabilities in osCommerce products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on February 16, 2024.
2vulnerabilities
1critical
1high
0exploited
8.5average CVSS score
Latest osCommerce vulnerabilities
- 7.2 High severity
ce_phoenix: Improper Control of Generation of Code
A remote code execution (RCE) vulnerability in /admin/define_language.php of CE Phoenix v1.0.8.20 allows attackers to execute arbitrary PHP code via injecting a crafted payload into the file english.php.
- 9.8 Critical severity
osCommerce: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in osCommerce 4. Affected by this issue is some unknown functionality of the file /b2b-supermarket/shopping-cart of the component POST Parameter Handler. The manipulation of the argument estimat