50 matches found
osCommerce 2.2 - 'products_id' SQL Injection
source: https://www.securityfocus.com/bid/9275/info It has been reported that one of the scripts included with osCommerce fails to validate user-supplied input, rendering it vulnerable to a SQL injection attack. It has been reported that an attacker may supply malicious SQL queries as a URI...
osCommerce 2.2 - SQL Injection
osCommerce 2.2 - SQL Injection !/usr/bin/perl source: https://www.securityfocus.com/bid/9211/info It has been reported that one of the scripts included with osCommerce fails to validate user-supplied input, rendering it vulnerable to a SQL injection attack. The script in question is used to verif...
osCommerce 2.2 - Authentication Bypass
osCommerce 2.2 - Authentication Bypass source: https://www.securityfocus.com/bid/7357/info osCommerce has been reported prone to authentication bypass vulnerability. It has been reported that osCommerce uses HTTP header information as a part of its authentication mechanism. Reportedly an attacker...
osCommerce 2.2 - 'product_info.php' Denial of Service
source: https://www.securityfocus.com/bid/7351/info It has been reported that an attacker may trigger a denial of service condition in osCommerce application. If malicious URI parameters are passed to several of the osCommerce PHP pages, the mySQL and web server hosting osCommerce reportedly...
osCommerce 2.2 - Authentication Bypass
source: https://www.securityfocus.com/bid/7357/info osCommerce has been reported prone to authentication bypass vulnerability. It has been reported that osCommerce uses HTTP header information as a part of its authentication mechanism. Reportedly an attacker may spoof parts of the HTTP header and...
osCommerce 2.1/2.2 - 'Checkout_Payment.php' Error Output Cross-Site Scripting
source: https://www.securityfocus.com/bid/7155/info Error output is not sufficiently sanitized of HTML and script code by osCommerce. This may allow for cross-site scripting attacks as remote users could create a malicious link to a site hosting osCommerce which contains hostile HTML and script...
osCommerce 2.12.2 - Info_Message Cross-Site Scripting
osCommerce 2.12.2 - InfoMessage Cross-Site Scripting source: https://www.securityfocus.com/bid/7153/info It has been reported that osCommerce does not sufficiently filter URI parameters supplied to multiple osCommerce scripts. As a result of this deficiency, it is possible for a remote attacker t...
osCommerce 2.1/2.2 - Error_Message Cross-Site Scripting
source: https://www.securityfocus.com/bid/7151/info It has been reported that osCommerce does not sufficiently filter URI parameters supplied to multiple osCommerce scripts. As a result of this deficiency, it is possible for a remote attacker to create a malicious link containing script code that...
osCommerce 2.1/2.2 - Info_Message Cross-Site Scripting
source: https://www.securityfocus.com/bid/7153/info It has been reported that osCommerce does not sufficiently filter URI parameters supplied to multiple osCommerce scripts. As a result of this deficiency, it is possible for a remote attacker to create a malicious link containing script code that...
