CVE-2026-105226

A code injection vulnerability exists in osCommerce osCommerce2 up to version 2.3.4.1 within the Newsletter Management component. The flaw originates from the include function in the admin/newsletters.php file, where manipulating the module argument allows for remote code execution. While the pro...

CVE-2026-105226 osCommerce osCommerce2 Newsletter Management newsletters.php include code injection

A security flaw has been discovered in osCommerce osCommerce2 up to 2.3.4.1. This vulnerability affects the function include of the file admin/newsletters.php of the component Newsletter Management. Performing a manipulation of the argument module results in code injection. The attack is possible...

CVE-2026-105226 osCommerce osCommerce2 Newsletter Management newsletters.php include code injection

A security flaw has been discovered in osCommerce osCommerce2 up to 2.3.4.1. This vulnerability affects the function include of the file admin/newsletters.php of the component Newsletter Management. Performing a manipulation of the argument module results in code injection. The attack is possible...

CVE-2026-105226 osCommerce osCommerce2 Newsletter Management newsletters.php include code injection

A security flaw has been discovered in osCommerce osCommerce2 up to 2.3.4.1. This vulnerability affects the function include of the file admin/newsletters.php of the component Newsletter Management. Performing a manipulation of the argument module results in code injection. The attack is possible...

CVE-2026-105225 osCommerce osCommerce2 Payment payment.php include code injection

A vulnerability was identified in osCommerce osCommerce2 up to 2.3.4.1. This affects the function include of the file includes/classes/payment.php of the component Payment Page. Such manipulation of the argument MODULEPAYMENTINSTALLED leads to code injection. The attack can be executed remotely...

CVE-2026-105225 osCommerce osCommerce2 Payment payment.php include code injection

A vulnerability was identified in osCommerce osCommerce2 up to 2.3.4.1. This affects the function include of the file includes/classes/payment.php of the component Payment Page. Such manipulation of the argument MODULEPAYMENTINSTALLED leads to code injection. The attack can be executed remotely...

CVE-2026-105225 osCommerce osCommerce2 Payment payment.php include code injection

A vulnerability was identified in osCommerce osCommerce2 up to 2.3.4.1. This affects the function include of the file includes/classes/payment.php of the component Payment Page. Such manipulation of the argument MODULEPAYMENTINSTALLED leads to code injection. The attack can be executed remotely...

CVE-2026-105225

A code injection vulnerability exists in osCommerce osCommerce2 versions up to 2.3.4.1 . The flaw resides in the Payment Page component, specifically within the include function of the includes/classes/payment.php file. Attackers can achieve remote code execution by manipulating the MODULE_PAYMEN...

CVE-2022-35212

osCommerce2 before v2.3.4.1 was discovered to contain a cross-site scripting XSS vulnerability via the function tepdberror...

EUVD-2022-38104

Malicious code in bioql PyPI...

CVE-2022-35212

osCommerce2 before v2.3.4.1 was discovered to contain a cross-site scripting XSS vulnerability via the function tepdberror...

Cross site scripting

osCommerce2 before v2.3.4.1 was discovered to contain a cross-site scripting XSS vulnerability via the function tepdberror...

CVE-2022-35212

osCommerce2 before v2.3.4.1 was discovered to contain a cross-site scripting XSS vulnerability via the function tepdberror...

CVE-2022-35212

osCommerce2 before v2.3.4.1 contains a cross-site scripting (XSS) vulnerability exposed through the tep_db_error() function. The issue is confirmed across multiple sources in the connected data set, tied to the tep_db_error() handling in older osCommerce2 releases. The primary affected component ...

CVE-2022-35212: Improper Neutralization of Input During Web Page Generation

osCommerce2 before v2.3.4.1 was discovered to contain a cross-site scripting XSS vulnerability via the function tepdberror...