893 matches found
osCommerce SQL注入漏洞
osCommerce is a set of open-source e-commerce solutions based on the GNU GPL license, developed by the osCommerce company. Version 2.3.4.1 of osCommerce contains a SQL injection vulnerability. This vulnerability stems from the currency parameter, which allows for SQL injections, potentially...
CVE-2019-25495: Improper Neutralization of Special Elements used in an SQL Command
osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the reviewsid parameter. Attackers can send GET requests to productreviewswrite.php with malicious reviewsid values using boolean-based SQL...
PT-2026-22365
osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the currency parameter. Attackers can send GET requests to shopping cart.php with malicious currency values using boolean-based SQL injectio...
CVE-2020-12058
Several XSS vulnerabilities in osCommerce CE Phoenix before 1.0.6.0 allow an attacker to inject and execute arbitrary JavaScript code. The malicious code can be injected as follows: the page parameter to catalog/admin/orderstatus.php, catalog/admin/taxrates.php, catalog/admin/languages.php,...
Exploits
osCommerce 2.3.4.1 - Remote Code Execution ---...
VulnCheck KEV: CVE-2018-25114
A remote code execution vulnerability exists within osCommerce Online Merchant version 2.3.4.1 due to insecure default configuration and missing authentication in the installer workflow. By default, the /install/ directory remains accessible after installation. An unauthenticated attacker can...
EUVD-2004-2013
Malware in sbrugna...
EUVD-2011-4469
Malware in sbrugna...
EUVD-2006-5175
Malware in sbrugna...
EUVD-2006-0485
Malware in sbrugna...
EUVD-2011-3724
Malware in sbrugna...
EUVD-2004-2629
Malware in sbrugna...
EUVD-2012-5677
Malware in sbrugna...
EUVD-2012-5676
Malware in sbrugna...
EUVD-2005-4671
Malware in sbrugna...
EUVD-2015-3048
Malware in sbrugna...
EUVD-2012-0347
Malware in sbrugna...
EUVD-2005-1953
Malware in sbrugna...