Online Merchant@2.2 Security Vulnerabilities and Issues — Online Merchant@2.2 CVE List

Lucene search

OscommerceOnline Merchant2.2

3 matches found

CVE•added 2012/01/26 3:55 p.m.•41 views

CVE-2012-0312

Cross-site scripting (XSS) vulnerability in osCommerce 2.2MS1J before R9, and osCommerce Online Merchant before 2.3.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

4.3CVSS5.8AI score0.00254EPSS

CVE•added 2012/05/27 7:55 p.m.•41 views

CVE-2012-1792

Cross-site scripting (XSS) vulnerability in osCommerce/OM/Core/Site/Setup/Application/Install/RPC/DBCheck.php in OSCommerce Online Merchant 3.0.2, when the software is being installed, allows remote attackers to inject arbitrary web script or HTML via the name parameter to oscommerce/index.php, whi...

2.6CVSS5.8AI score0.00225EPSS

CVE•added 2012/05/27 7:55 p.m.•34 views

CVE-2012-2935

Cross-site scripting (XSS) vulnerability in osCommerce/OM/Core/Site/Shop/Application/Checkout/pages/main.php in OSCommerce Online Merchant 3.0.2 allows remote attackers to inject arbitrary web script or HTML via the value_title parameter, a different vulnerability than CVE-2012-1059.

4.3CVSS5.8AI score0.07855EPSS