Login Request a demo
OS
Vendor
osCommerce
10 products with CVEs on record
103
CVEs
0
On KEV
2
New 30D
Products
OS
osCommerce2
osCommerce
4.7
2 CVEs0 on KEV2 new
OS
osCommerce
osCommerce
9.8
82 CVEs0 on KEV0 new
OM
Online Merchant
osCommerce
9.3
10 CVEs0 on KEV0 new
CP
CE Phoenix
Oscommerce
7.2
3 CVEs0 on KEV0 new
CT
Customer Testimonials
Oscommerce
–
1 CVEs0 on KEV0 new
FB
Finnish Bank Payment
Oscommerce
–
1 CVEs0 on KEV0 new
LU
Luottokunta
Oscommerce
–
1 CVEs0 on KEV0 new
OS
Osc2nuke
Oscommerce
–
1 CVEs0 on KEV0 new
PP
Php Point OF Sale
Oscommerce
–
1 CVEs0 on KEV0 new
PB
Poll Booth
Oscommerce
–
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-105226
OS
osCommerce2
osCommerce
4.7
0%
Oct 5osCommerce osCommerce2 Newsletter Management newsletters.php include code injection
CVE-2026-105225
OS
osCommerce2
osCommerce
4.3
0%
Oct 5osCommerce osCommerce2 Payment payment.php include code injection
CVE-2026-18592
OS
osCommerce
Oscommerce
4.7
0%
Aug 3osCommerce Email Template Configuration EmailController.php EmailController sql injection
CVE-2019-25497
OS
osCommerce
Oscommerce
7.5
0%
Feb 27osCommerce 2.3.4.1 SQL Injection via currency Parameter
CVE-2019-25496
OS
osCommerce
Oscommerce
7.5
0%
Feb 27osCommerce 2.3.4.1 SQL Injection via products_id Parameter
CVE-2019-25495
OS
osCommerce
Oscommerce
7.5
0%
Feb 27osCommerce 2.3.4.1 SQL Injection via reviews_id Parameter
CVE-2009-20006
OS
osCommerce
osCommerce
9.3
2%
Sep 16osCommerce <= 2.2 Admin File Manager Arbitrary PHP Code Execution
CVE-2018-25114
OM
Online Merchant
osCommerce
9.3
5%
Jul 23osCommerce 2.3.4.1 Installer Unauthenticated Configuration File Injection PHP Code Execution
CVE-2025-40674
OS
osCommerce
osCommerce
5.1
0%
Jun 17Reflected Cross-Site Scripting (XSS) in osCommerce
CVE-2024-4348
OS
Oscommerce
Oscommerce
4.3
2%
Apr 30osCommerce all-products cross site scripting
CVE-2024-22724
OS
Oscommerce
Oscommerce
6.6
0%
Mar 21An issue was discovered in osCommerce v4, allows local attackers to bypass file upload restrictions and execute arbitrary code via administrator profile photo upload feature
CVE-2024-26521
CP
CE Phoenix
Oscommerce
4.8
1%
Mar 12HTML Injection vulnerability in CE Phoenix v1.0.8.20 and before allows a remote attacker to execute arbitrary code, escalate privileges, and obtain sensitive information via a…
CVE-2024-25415
CP
CE Phoenix
Oscommerce
7.2
27%
Feb 16A remote code execution (RCE) vulnerability in /admin/define_language.php of CE Phoenix v1.0.8.20 allows attackers to execute arbitrary PHP code via injecting a crafted payload…
CVE-2023-6609
OS
Oscommerce
Oscommerce
6.1
0%
Dec 8osCommerce all-products cross site scripting
CVE-2023-6579
OS
Oscommerce
Oscommerce
9.8
24%
Dec 7osCommerce POST Parameter shopping-cart sql injection
CVE-2023-6296
OS
Oscommerce
Oscommerce
6.1
1%
Nov 26osCommerce Instant Message compare cross site scripting
CVE-2023-5112
OS
Oscommerce
Oscommerce
5.4
0%
Sep 30Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
CVE-2023-5111
OS
Oscommerce
Oscommerce
5.4
0%
Sep 30Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
CVE-2023-43735
OS
Oscommerce
Oscommerce
5.4
0%
Sep 30Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
CVE-2023-43734
OS
Oscommerce
Oscommerce
5.4
0%
Sep 30Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
CVE-2023-43733
OS
Oscommerce
Oscommerce
5.4
0%
Sep 30Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
CVE-2023-43732
OS
Oscommerce
Oscommerce
5.4
0%
Sep 30Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
CVE-2023-43731
OS
Oscommerce
Oscommerce
5.4
0%
Sep 30Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
CVE-2023-43730
OS
Oscommerce
Oscommerce
5.4
0%
Sep 30Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
CVE-2023-43729
OS
Oscommerce
Oscommerce
5.4
0%
Sep 30Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
CVE-2023-43728
OS
Oscommerce
Oscommerce
5.4
0%
Sep 30Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
CVE-2023-43727
OS
Oscommerce
Oscommerce
5.4
0%
Sep 30Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
CVE-2023-43726
OS
Oscommerce
Oscommerce
5.4
0%
Sep 30Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
CVE-2023-43725
OS
Oscommerce
Oscommerce
5.4
0%
Sep 30Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
CVE-2023-43724
OS
Oscommerce
Oscommerce
5.4
0%
Sep 30Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
CVE-2023-43723
OS
Oscommerce
Oscommerce
5.4
0%
Sep 30Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
CVE-2023-43722
OS
Oscommerce
Oscommerce
5.4
0%
Sep 30Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
CVE-2023-43721
OS
Oscommerce
Oscommerce
5.4
0%
Sep 30Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
CVE-2023-43720
OS
Oscommerce
Oscommerce
5.4
0%
Sep 30Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
CVE-2023-43719
OS
Oscommerce
Oscommerce
5.4
0%
Sep 30Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
CVE-2023-43718
OS
Oscommerce
Oscommerce
5.4
0%
Sep 30Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
CVE-2023-43717
OS
Oscommerce
Oscommerce
5.4
0%
Sep 30Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
CVE-2023-43716
OS
Oscommerce
Oscommerce
5.4
0%
Sep 30Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
CVE-2023-43715
OS
Oscommerce
Oscommerce
5.4
0%
Sep 30Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
CVE-2023-43714
OS
Oscommerce
Oscommerce
5.4
0%
Sep 30Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
CVE-2023-43713
OS
Oscommerce
Oscommerce
5.4
0%
Sep 30Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
CVE-2023-43712
OS
Oscommerce
Oscommerce
5.4
0%
Sep 30Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
CVE-2023-43711
OS
Oscommerce
Oscommerce
5.4
0%
Sep 30Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
CVE-2023-43710
OS
Oscommerce
Oscommerce
5.4
0%
Sep 30Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
CVE-2023-43709
OS
Oscommerce
Oscommerce
5.4
0%
Sep 30Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
CVE-2023-43708
OS
Oscommerce
Oscommerce
5.4
0%
Sep 30Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
CVE-2023-43707
OS
Oscommerce
Oscommerce
5.4
0%
Sep 30Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
CVE-2023-43706
OS
Oscommerce
Oscommerce
5.4
0%
Sep 30Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
CVE-2023-43705
OS
Oscommerce
Oscommerce
5.4
0%
Sep 30Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
CVE-2023-43704
OS
Oscommerce
Oscommerce
5.4
0%
Sep 30Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
CVE-2023-43703
OS
Oscommerce
Oscommerce
5.4
0%
Sep 30Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
CVE-2023-43702
OS
Oscommerce
Oscommerce
5.4
0%
Sep 30Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
CVE-2022-35212
OS
Oscommerce
Oscommerce
6.1
1%
Aug 18osCommerce2 before v2.3.4.1 was discovered to contain a cross-site scripting (XSS) vulnerability via the function tep_db_error()
CVE-2020-23360
OS
Oscommerce
Oscommerce
9.8
1%
Jan 27oscommerce v2.3.4.1 has a functional problem in user registration and password rechecking, where a non-identical password can bypass the checks in…
CVE-2020-29070
OS
Oscommerce
Oscommerce
4.8
1%
Nov 25osCommerce 2.3.4.1 has XSS vulnerability via the authenticated user entering the XSS payload into the title section of newsletters
CVE-2020-27976
OS
Oscommerce
Oscommerce
9.8
7%
Oct 28osCommerce Phoenix CE before 1.0.5.4 allows OS command injection remotely
CVE-2020-27975
OS
Oscommerce
Oscommerce
8.8
1%
Oct 28osCommerce Phoenix CE before 1.0.5.4 allows admin/define_language.php CSRF
CVE-2020-12058
CP
CE Phoenix
Oscommerce
6.1
1%
Sep 3Several XSS vulnerabilities in osCommerce CE Phoenix before 1.0.6.0 allow an attacker to inject and execute arbitrary JavaScript code
CVE-2018-18573
OS
Oscommerce
Oscommerce
7.2
3%
Aug 22osCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the "product" page
CVE-2018-18572
OS
Oscommerce
Oscommerce
7.2
3%
Aug 22osCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the "product" page