50 matches found
EUVD-2011-3724
Malware in sbrugna...
EUVD-2008-4153
Malware in sbrugna...
EUVD-2002-1970
Malware in sbrugna...
EUVD-2018-21601
Malware in sbrugna...
EUVD-2006-4285
Malware in sbrugna...
EUVD-2012-0348
Malware in sbrugna...
EUVD-2009-2035
Malware in sbrugna...
EUVD-2012-5675
Malware in sbrugna...
EUVD-2018-10292
Malware in sbrugna...
EUVD-2012-2914
Malware in sbrugna...
EUVD-2018-10293
Malware in sbrugna...
EUVD-2012-5673
Malware in sbrugna...
EUVD-2023-58538
Malicious code in bioql PyPI...
EUVD-2023-58832
Malicious code in bioql PyPI...
PT-2025-38002
Name of the Vulnerable Software and Affected Versions: osCommerce versions up to and including 2.2 RC2a Description: osCommerce versions up to and including 2.2 RC2a contain a flaw in the administrative file manager utility admin/file manager.php. The interface lacks sufficient input validation a...
CVE-2018-25114
A remote code execution vulnerability exists within osCommerce Online Merchant version 2.3.4.1 due to insecure default configuration and missing authentication in the installer workflow. By default, the /install/ directory remains accessible after installation. An unauthenticated attacker can...
CVE-2018-25114
A remote code execution vulnerability exists within osCommerce Online Merchant version 2.3.4.1 due to insecure default configuration and missing authentication in the installer workflow. By default, the /install/ directory remains accessible after installation. An unauthenticated attacker can...
CVE-2018-25114 osCommerce 2.3.4.1 Installer Unauthenticated Configuration File Injection PHP Code Execution
A remote code execution vulnerability exists within osCommerce Online Merchant version 2.3.4.1 due to insecure default configuration and missing authentication in the installer workflow. By default, the /install/ directory remains accessible after installation. An unauthenticated attacker can...
CVE-2018-25114 osCommerce 2.3.4.1 Installer Unauthenticated Configuration File Injection PHP Code Execution
A remote code execution vulnerability exists within osCommerce Online Merchant version 2.3.4.1 due to insecure default configuration and missing authentication in the installer workflow. By default, the /install/ directory remains accessible after installation. An unauthenticated attacker can...
CVE-2025-40674
Reflected Cross-Site Scripting XSS in osCommerce v4. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending the victim a malicious URL using the name of any parameter in /watch/en/about-us. This vulnerability can be exploited to steal sensitive user...