CVE-2026-105225

A vulnerability was identified in osCommerce osCommerce2 up to 2.3.4.1. This affects the function include of the file includes/classes/payment.php of the component Payment Page. Such manipulation of the argument MODULEPAYMENTINSTALLED leads to code injection. The attack can be executed remotely...

CVE-2026-105225

A code injection vulnerability exists in osCommerce osCommerce2 versions up to 2.3.4.1 . The flaw resides in the Payment Page component, specifically within the include function of the includes/classes/payment.php file. Attackers can achieve remote code execution by manipulating the MODULE_PAYMEN...