Login Request a demo
CP
Product
CE Phoenix
by Oscommerce · last CVE Mar 12, 2024
3
CVEs
0
On KEV
7.2
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 0High 1Medium 2Low 0
Severity
All severities3Critical0High1Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add CE Phoenix to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-25415
7.2
27%
Feb 16
A remote code execution (RCE) vulnerability in /admin/define_language.php of CE Phoenix v1.0.8.20 allows attackers to execute arbitrary PHP code via injecting a crafted payload…
Affected: 1.0.8.20
CVE-2020-12058
6.1
1%
Sep 3
Several XSS vulnerabilities in osCommerce CE Phoenix before 1.0.6.0 allow an attacker to inject and execute arbitrary JavaScript code
Affected: 1.0.6.0
CVE-2024-26521
4.8
1%
Mar 12
HTML Injection vulnerability in CE Phoenix v1.0.8.20 and before allows a remote attacker to execute arbitrary code, escalate privileges, and obtain sensitive information via a…
Affected: before 1.0.8.20
Showing 3