954 matches found
PT-2026-22365
osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the currency parameter. Attackers can send GET requests to shopping cart.php with malicious currency values using boolean-based SQL injectio...
CVE-2020-12058
Several XSS vulnerabilities in osCommerce CE Phoenix before 1.0.6.0 allow an attacker to inject and execute arbitrary JavaScript code. The malicious code can be injected as follows: the page parameter to catalog/admin/orderstatus.php, catalog/admin/taxrates.php, catalog/admin/languages.php,...
Exploits
osCommerce 2.3.4.1 - Remote Code Execution ---...
VulnCheck KEV: CVE-2018-25114
A remote code execution vulnerability exists within osCommerce Online Merchant version 2.3.4.1 due to insecure default configuration and missing authentication in the installer workflow. By default, the /install/ directory remains accessible after installation. An unauthenticated attacker can...
EUVD-2002-1998
Malware in sbrugna...
EUVD-2004-2629
Malware in sbrugna...
EUVD-2018-10668
Malware in sbrugna...
EUVD-2008-4153
Malware in sbrugna...
EUVD-2012-0348
Malware in sbrugna...
EUVD-2018-10293
Malware in sbrugna...
EUVD-2020-20467
Malware in sbrugna...
EUVD-2020-21452
Malware in sbrugna...
EUVD-2015-3048
Malware in sbrugna...
EUVD-2006-4285
Malware in sbrugna...
EUVD-2005-1953
Malware in sbrugna...
EUVD-2012-5677
Malware in sbrugna...
EUVD-2020-4374
Malware in sbrugna...
EUVD-2011-3724
Malware in sbrugna...