900 matches found
CVE-2019-25496: Improper Neutralization of Special Elements used in an SQL Command
osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the productsid parameter. Attackers can modify the productsid value in productinfo.php requests and append boolean-based SQL injection...
osCommerce SQL注入漏洞
osCommerce is a set of open-source e-commerce solutions developed by osCommerce Inc., licensed under the GNU GPL. Version 2.3.4.1 of osCommerce contains a SQL injection vulnerability. This vulnerability stems from the reviewsid parameter, which allows for SQL injections, potentially enabling...
PT-2026-22363
Name of the Vulnerable Software and Affected Versions osCommerce version 2.3.4.1 Description The software contains a SQL injection issue that allows unauthenticated attackers to manipulate database queries. Attackers can inject SQL code through the reviews id parameter. By sending GET requests to...
PT-2026-22364
Name of the Vulnerable Software and Affected Versions osCommerce version 2.3.4.1 Description The software contains a SQL injection issue that allows unauthenticated attackers to manipulate database queries. Attackers can inject SQL code through the products id parameter. Specifically, modifying t...
osCommerce SQL注入漏洞
osCommerce is a set of open-source e-commerce solutions developed by the osCommerce company, licensed under the GNU GPL. Version 2.3.4.1 of osCommerce contains a SQL injection vulnerability. This vulnerability stems from the productsid parameter, which allows for SQL injections, potentially...
CVE-2019-25497: Improper Neutralization of Special Elements used in an SQL Command
osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the currency parameter. Attackers can send GET requests to shoppingcart.php with malicious currency values using boolean-based SQL injection...
osCommerce SQL注入漏洞
osCommerce is a set of open-source e-commerce solutions based on the GNU GPL license, developed by the osCommerce company. Version 2.3.4.1 of osCommerce contains a SQL injection vulnerability. This vulnerability stems from the currency parameter, which allows for SQL injections, potentially...
CVE-2019-25495: Improper Neutralization of Special Elements used in an SQL Command
osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the reviewsid parameter. Attackers can send GET requests to productreviewswrite.php with malicious reviewsid values using boolean-based SQL...
PT-2026-22365
osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the currency parameter. Attackers can send GET requests to shopping cart.php with malicious currency values using boolean-based SQL injectio...
CVE-2020-12058
Several XSS vulnerabilities in osCommerce CE Phoenix before 1.0.6.0 allow an attacker to inject and execute arbitrary JavaScript code. The malicious code can be injected as follows: the page parameter to catalog/admin/orderstatus.php, catalog/admin/taxrates.php, catalog/admin/languages.php,...
Exploits
osCommerce 2.3.4.1 - Remote Code Execution ---...
VulnCheck KEV: CVE-2018-25114
A remote code execution vulnerability exists within osCommerce Online Merchant version 2.3.4.1 due to insecure default configuration and missing authentication in the installer workflow. By default, the /install/ directory remains accessible after installation. An unauthenticated attacker can...
EUVD-2015-3048
Malware in sbrugna...
EUVD-2011-3724
Malware in sbrugna...
EUVD-2004-2013
Malware in sbrugna...
EUVD-2005-4671
Malware in sbrugna...
EUVD-2004-2629
Malware in sbrugna...
EUVD-2006-5175
Malware in sbrugna...